E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten.

akitojya · 10.12.2013, 16:51

Guten Abend, liebes Forum & auch einen schönen Abend an die netten Helfer hier. :>

Ich habe seit heute Morgen das Problem, dass mein E-Mail Konto bei der Telekom Spam Nachrichten in meinem Namen verschickt und diese dann zurückkommen, wenn es den Empfänger nicht gibt - "Mail delivery failed: returning message to sender".

Habe deshalb vorhin einmal den Systemscan bei meinem Antivirenprogramm Avast, den kompletten Scan mit dem Windows-Tool zum Entfernen von bösartiger Software und den Scan bei Spybot durchgeführt - keines der Programme hat einen Schädling gefunden.

Habe daraufhin bei der Telekom angerufen um nachzufragen, was man in so einem Fall tun kann und habe nur ein "ja also, wir können da nicht's machen" entgegengeschleudert bekommen.

Deswegen bin ich grad sehr am Verzweifeln und hoffe jemand kann mir bei meinem Problem weiterhelfen.

Vielen Dank für jegliche Bemühungen! :>

Aneri · 10.12.2013, 17:01

Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1

Bitte ändere das Passwort deines Email Accounts. Prüfe auch im Online Zugang (webmailer) ob hier eventuell Auffälligkeiten vorliegen.
Vergiss nicht das Passwort auch bei deinem Email Programm zu ändern damit dieses deine EMails abholen kann.

Schritt 2

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

akitojya · 10.12.2013, 17:28

Passwort geändert. :>

FRST:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by JB (administrator) on JB-PC on 10-12-2013 17:21:07
Running from C:\Users\JB\AppData\Local\Opera\Opera\temporary_downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Microsoft Corporation) C:\Users\JB\AppData\Local\Opera\Opera\temporary_downloads\Windows-KB890830-x64-V5.7.exe
(Microsoft Corporation) D:\70e1d9973f6f73c87d\mrtstub.exe
(Microsoft Corporation) C:\Windows\System32\MRT.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-25] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKCU\...\Run: [Google Update] - C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-13] (Google Inc.)
HKCU\...\Winlogon: [Shell] Explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKCU\...\Command Processor: "C:\Users\JB\AppData\Local\Temp\jsvhqpehtkkkdvaqu.exe" <======= ATTENTION
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll [ ] ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.findrsearch.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM - DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKLM - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://go.findrsearch.com
CHR RestoreOnStartup: "sync": {
      "suppress_start"
CHR DefaultSearchKeyword: bing.com
CHR DefaultSearchProvider: Bing
CHR DefaultSearchURL: hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}
CHR DefaultSuggestURL: hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}
CHR Plugin: (Shockwave Flash) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (WordCaptureX) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\npWCX.dll (Deskperience)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Java(TM) Platform SE 6 U35) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.350.10) - C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\JB\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Games Center) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb\1.0_0
CHR Extension: (Word CaptureX Extension) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Google Wallet) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx
CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-23] (Windows (R) 2003 DDK 3790 provider)
S3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI64.sys [28192 2009-10-15] (T-Systems International GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-10 17:20 - 2013-12-10 17:20 - 00000000 ____D C:\FRST
2013-12-10 16:30 - 2013-12-10 16:30 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-10 16:30 - 2013-12-10 16:30 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-12-10 16:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2013-12-10 16:29 - 2013-12-10 16:35 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-10 16:29 - 2013-12-10 16:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Neuer Ordner
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Mascara
2013-12-04 20:53 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE
2013-12-04 20:43 - 2013-12-04 20:43 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-04 20:41 - 2013-12-04 20:53 - 00010277 _____ C:\windows\IE11_main.log
2013-11-26 20:43 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-11-14 19:16 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 19:16 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-14 19:16 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-14 19:16 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 19:16 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-11-14 19:16 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-11-14 19:16 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-11-14 19:11 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-14 19:11 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-14 19:11 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-14 19:11 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-11-14 19:11 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 19:11 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-14 19:11 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-11-14 19:11 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-14 19:11 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-11-14 19:10 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-14 19:10 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-14 19:10 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-14 19:10 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-14 19:10 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-14 19:10 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-14 19:10 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-14 19:10 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-14 19:10 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-11-14 19:10 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-11-14 19:10 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-11-14 19:10 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-11-14 19:10 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-14 19:10 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-12-10 17:20 - 2013-12-10 17:20 - 00000000 ____D C:\FRST
2013-12-10 17:13 - 2012-09-17 06:02 - 00000000 ____D C:\Users\JB\AppData\Local\CrashDumps
2013-12-10 17:11 - 2011-07-28 20:05 - 00700150 _____ C:\windows\system32\perfh007.dat
2013-12-10 17:11 - 2011-07-28 20:05 - 00149968 _____ C:\windows\system32\perfc007.dat
2013-12-10 17:11 - 2009-07-14 06:13 - 01622230 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-10 17:04 - 2012-09-13 21:01 - 00001108 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA.job
2013-12-10 17:04 - 2012-09-13 21:01 - 00001056 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core.job
2013-12-10 16:56 - 2011-07-28 20:31 - 02080091 _____ C:\windows\WindowsUpdate.log
2013-12-10 16:42 - 2013-06-28 15:42 - 00000274 _____ C:\windows\Tasks\DSite.job
2013-12-10 16:35 - 2013-12-10 16:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-10 16:30 - 2013-12-10 16:30 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-10 16:30 - 2013-12-10 16:30 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-12-10 16:30 - 2013-12-10 16:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-10 16:23 - 2012-03-29 19:25 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-10 15:36 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-10 15:36 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-10 15:27 - 2013-08-01 13:28 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2013-12-10 15:25 - 2013-08-01 13:41 - 00010741 _____ C:\windows\setupact.log
2013-12-10 15:25 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-09 15:37 - 2012-11-30 18:05 - 09396224 ___SH C:\Users\JB\Desktop\Thumbs.db
2013-12-09 15:11 - 2013-08-01 13:40 - 00879530 _____ C:\windows\PFRO.log
2013-12-08 21:20 - 2012-04-17 17:47 - 00000000 ____D C:\Users\JB\AppData\Roaming\Dropbox
2013-12-08 21:19 - 2012-04-17 17:52 - 00000000 ___RD C:\Users\JB\Dropbox
2013-12-08 14:44 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Neuer Ordner
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Mascara
2013-12-08 14:13 - 2011-12-09 21:08 - 00000000 ____D C:\Users\JB\AppData\Local\Windows Live
2013-12-06 13:13 - 2011-12-09 17:28 - 00001425 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-06 10:13 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-12-04 20:53 - 2013-12-04 20:41 - 00010277 _____ C:\windows\IE11_main.log
2013-12-04 20:43 - 2013-12-04 20:43 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-01 17:47 - 2011-12-09 18:59 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-01 14:42 - 2011-12-11 19:22 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-28 16:59 - 2012-09-13 21:01 - 00004072 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA
2013-11-28 16:59 - 2012-09-13 21:01 - 00003676 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core
2013-11-25 17:45 - 2013-09-18 18:31 - 00000000 ____D C:\Users\JB\.gimp-2.8
2013-11-18 17:22 - 2013-08-09 07:42 - 00000000 ____D C:\windows\system32\MRT

Files to move or delete:
====================
C:\Users\JB\NPE.exe
C:\Users\JB\Opera 1164.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-04 21:30

==================== End Of Log ============================

--- --- ---

& Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-12-2013
Ran by JB at 2013-12-10 17:22:09
Running from C:\Users\JB\AppData\Local\Opera\Opera\temporary_downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 Online (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Online (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Online (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

„Windows Live Essentials“ (x32 Version: 16.4.3505.0912)
„Windows Live Mail“ (x32 Version: 16.4.3505.0912)
„Windows Live Messenger“ (x32 Version: 16.4.3505.0912)
7-Zip 9.20 (x32)
Adobe AIR (x32 Version: 3.7.0.2090)
Adobe Download Assistant (x32 Version: 1.2.3)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.82)
Amazon Kindle (HKCU)
Apple Application Support (x32 Version: 2.2.2)
Apple Mobile Device Support (Version: 6.0.0.59)
Apple Software Update (x32 Version: 2.1.3.127)
Atheros Client Installation Program (x32 Version: 9.0)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
BatteryLifeExtender (x32 Version: 1.0.11)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Boilsoft Video Joiner 6.57 (x32)
Bonjour (Version: 3.0.0.10)
Broadcom 802.11 Network Adapter (Version: 5.60.48.55)
Build-a-lot (x32 Version: 2.2.0.82)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32)
Canon MG5100 series Benutzerregistrierung (x32)
Canon MG5100 series MP Drivers
Canon MP Navigator EX 4.0 (x32)
CCleaner (Version: 4.03)
Chuzzle Deluxe (x32 Version: 2.2.0.82)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Citavi 4 (x32 Version: 4.1.0.3)
CyberLink Media Suite (x32 Version: 8.0.2227)
CyberLink Media+ Player10 (x32 Version: 10.0.1110.00)
CyberLink MediaShow (x32 Version: 5.0.1130a)
CyberLink Power2Go (x32 Version: 6.1.3802)
CyberLink PowerDirector (x32 Version: 8.0.3306)
CyberLink YouCam (x32 Version: 3.1.3509)
D3DX10 (x32 Version: 15.4.2368.0902)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.82)
Dropbox (HKCU Version: 2.0.22)
Easy Content Share (x32 Version: 1.0)
Easy Display Manager (x32 Version: 3.2)
Easy Migration (x32 Version: 1.0)
Easy Network Manager (x32 Version: 4.4.7)
Easy SpeedUp Manager (x32 Version: 2.1.1.1)
EasyBatteryManager (x32 Version: 4.0.0.4)
EasyFileShare (x32 Version: 1.0.12)
ETDWare PS/2-X64 8.0.7.2_WHQL (Version: 8.0.7.2)
Farm Frenzy (x32 Version: 2.2.0.82)
Fast Start (x32 Version: 2.2.0.1)
Fotoattēlu galerija (x32 Version: 16.4.3505.0912)
Fotogaléria (x32 Version: 16.4.3505.0912)
Fotogalerie (x32 Version: 16.4.3505.0912)
Fotogalerija (x32 Version: 16.4.3505.0912)
Foto-galerija (x32 Version: 16.4.3505.0912)
Fotogalleri (x32 Version: 16.4.3505.0912)
Fotogalleriet (x32 Version: 16.4.3505.0912)
Fotoğraf Galerisi (x32 Version: 16.4.3505.0912)
Fotótár (x32 Version: 16.4.3505.0912)
Free YouTube Download version 3.2.0.128 (x32 Version: 3.2.0.128)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Galeria de Fotografias (x32 Version: 16.4.3505.0912)
Galeria de Fotos (x32 Version: 16.4.3505.0912)
Galería de fotos (x32 Version: 16.4.3505.0912)
Galeria fotografii (x32 Version: 16.4.3505.0912)
Galerie de photos (x32 Version: 16.4.3505.0912)
Galerie foto (x32 Version: 16.4.3505.0912)
Galerija fotografija (x32 Version: 16.4.3505.0912)
GamesCenter (x32)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (HKCU Version: 31.0.1650.63)
HTC BMP USB Driver (x32 Version: 1.0.5375)
HTC Driver Installer (x32 Version: 3.0.0.021)
HTC Sync (x32 Version: 3.2.10)
Image Editor Packages (HKCU)
Insaniquarium Deluxe (x32 Version: 2.2.0.82)
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.01.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.5.1001)
iTunes (Version: 10.7.0.21)
Java 7 Update 9 (64-bit) (Version: 7.0.90)
Java Auto Updater (x32 Version: 2.0.7.1)
Java SE Development Kit 7 Update 9 (64-bit) (Version: 1.7.0.90)
Java(TM) 6 Update 35 (x32 Version: 6.0.350)
John Deere Drive Green (x32 Version: 2.2.0.82)
Junk Mail filter update (x32 Version: 16.4.3505.0912)
Kalenderchen 5 (x32)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Movie Color Enhancer (x32 Version: 1.0)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Multimedia POP (x32 Version: 1.0)
MySQL Connector C++ 1.1.2 (Version: 1.1.2)
MySQL Connector J (x32 Version: 5.1.23)
MySQL Connector Net 6.6.5 (x32 Version: 6.6.5)
MySQL Connector/ODBC 5.2(w) (Version: 5.2.4)
MySQL Documents 5.6 (x32 Version: 5.6.10)
MySQL Examples and Samples 5.6 (x32 Version: 5.6.10)
MySQL Installer (x32 Version: 1.1.7.0)
MySQL Notifier 1.0.3 (x32 Version: 1.0.3)
MySQL Workbench 5.2 CE (x32 Version: 5.2.47)
Norton Online Backup (x32 Version: 2.1.17869)
Notepad++ (x32 Version: 6.3.2)
NVIDIA Display Control Panel (Version: 6.14.12.6704)
NVIDIA Graphics Driver 267.04 (Version: 267.04)
NVIDIA HD Audio Driver 1.2.22.1 (Version: 1.2.22.1)
NVIDIA Install Application (Version: 2.265.39.0)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
Opera 12.16 (x32 Version: 12.16.1860)
PDFCreator (x32 Version: 1.5.0)
Peggle (x32 Version: 2.2.0.82)
Penguins! (x32 Version: 2.2.0.82)
PhoneShare (x32 Version: 9.1.4)
Photo Common (x32 Version: 16.4.3505.0912)
Photo Gallery (x32 Version: 16.4.3505.0912)
PhotoScape (x32)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies (x32 Version: 2.2.0.82)
Poczta usługi Windows Live (x32 Version: 16.4.3505.0912)
Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912)
Polar Golfer (x32 Version: 2.2.0.82)
Pošta Windows Live (x32 Version: 16.4.3505.0912)
Raccolta foto (x32 Version: 16.4.3505.0912)
Realtek Ethernet Controller Driver (x32 Version: 7.40.126.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6400)
Samsung AnyWeb Print (x32 Version: 2.0.67.1)
Samsung Printer Live Update (x32)
Samsung Recovery Solution 5 (x32 Version: 5.0.1.0)
Samsung Support Center 1.0 (x32 Version: 1.1.38)
Samsung Universal Print Driver (x32 Version: 2.02.05.00:27)
Samsung Universal Scan Driver (x32 Version: 1.2.5.0)
Samsung Update Plus (x32 Version: 3.0.1.17)
Secure Download Manager (x32 Version: 3.1.0)
Spybot - Search & Destroy (x32 Version: 2.2.25)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0)
Update for Image Editor (HKCU)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
User Guide (x32 Version: 1.6)
Valokuvavalikoima (x32 Version: 16.4.3505.0912)
WildTangent Games (x32 Version: 1.0.1.5)
WildTangent ORB Game Console (x32)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live Pošta (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live Temel Parçalar (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 16.4.3505.0912)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 16.4.3505.0912)
Windows Live 메일 (x32 Version: 16.4.3505.0912)
Windows Live 필수 패키지 (x32 Version: 16.4.3505.0912)
Windows Live 程式集 (x32 Version: 16.4.3505.0912)
Windows Live 软件包 (x32 Version: 16.4.3505.0912)
Windows Liven peruspaketti (x32 Version: 16.4.3505.0912)
Windows Liven sähköposti (x32 Version: 16.4.3505.0912)
WinPcap 4.1.1 (x32 Version: 4.1.0.1753)
WinZip 17.5 (Version: 17.5.10480)
WordCaptureX Pro (x32 Version: 4.0.0)
YGOPro DevPro Version 1.9.2r2 (x32 Version: 1.9.2r2)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912)
Основные компоненты Windows Live (x32 Version: 16.4.3505.0912)
Почта Windows Live (x32 Version: 16.4.3505.0912)
Фотоальбом (x32 Version: 16.4.3505.0912)
Фотогалерия (x32 Version: 16.4.3505.0912)
Фотографии (общедоступная версия) (x32 Version: 16.4.3505.0912)
גלריית התמונות (x32 Version: 16.4.3505.0912)
بريد Windows Live (x32 Version: 16.4.3505.0912)
معرض الصور (x32 Version: 16.4.3505.0912)
사진 갤러리 (x32 Version: 16.4.3505.0912)
影像中心 (x32 Version: 16.4.3505.0912)
照片库 (x32 Version: 16.4.3505.0912)

==================== Restore Points  =========================

16-08-2013 10:33:39 Windows Update
13-09-2013 12:14:51 Windows Update
14-10-2013 20:31:02 Windows Update
18-11-2013 16:15:16 Windows Update
26-11-2013 21:57:01 Windows Update
04-12-2013 19:38:47 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {025A0E68-F036-467F-9553-F2C8F9FD91BA} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2011-02-14] (SEC)
Task: {07B13C30-5A10-4756-B40E-D04632AF8EC3} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-29] (Samsung Electronics Co., Ltd.)
Task: {0AA78EFD-EA4E-4C03-9691-5855AE596C69} - System32\Tasks\SUPBackground => C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe [2011-12-20] (Samsung Electronics)
Task: {11D935D9-676C-44E4-BB96-FAA163882110} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-12-23] (Samsung Electronics Co., Ltd.)
Task: {2239D717-BD7C-45DC-A014-2DF853291F33} - System32\Tasks\EasyPartitionManager => C:\Windows\MSetup\BA46-12225A02\EPM.exe
Task: {3BE0B2FB-3DB8-4B06-A799-77B71757DBAF} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [2010-02-10] (Samsung Electronics Co., Ltd.)
Task: {4C13C545-CC5D-4E5D-9C50-969215675D1D} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-12-18] (Samsung Electronics. Co. Ltd.)
Task: {4D3F0A57-657D-476B-9CC3-DB9A4B93F745} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {4D63B860-8D80-444B-B2A1-217511EC0150} - System32\Tasks\DSite => C:\Users\JB\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-06-28] ()
Task: {5F956975-F718-4BD1-95FF-0D56C37E7119} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)
Task: {60CE811F-4A56-47A2-A3A9-8B1413364363} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {6241A16F-3FA5-40BE-B562-450A6181B4E1} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-01] ()
Task: {64CF86D5-0C29-484E-9B9B-6BABBC2459E1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {67D22936-2059-4CE5-9191-0FDC0EDD158E} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-09-13] (Microsoft Corporation)
Task: {6B9D0937-9354-46F6-961A-900B66302D64} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {6BED746D-FFBB-4CEC-ACED-384714FDC45D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA => C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-13] (Google Inc.)
Task: {71ACC254-CC3E-4A31-80B3-1F33F89288A9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7473CDC5-88D7-496F-8E51-89ADB65756BC} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink)
Task: {8C79300E-DF30-476A-8E90-4CEDB652CFCA} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)
Task: {9BB7601A-1045-4A52-B008-54DAEA7EEF34} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-09-04] (SAMSUNG Electronics)
Task: {AED4BB95-250F-44D1-87FE-74AC44230F60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core => C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-13] (Google Inc.)
Task: {BEF11CF5-B7C0-4BA1-B39D-E97B6EA2D365} - System32\Tasks\WifiManager => C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe [2011-01-04] (Samsung Electronics Co., Ltd.)
Task: {E492D4B1-EDEB-4F6D-88D9-BD17FA6411DD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {E49EDE65-9901-434A-B70A-3D0811B48019} - System32\Tasks\Google Updater and Installer => C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-13] (Google Inc.)
Task: {F2B2C2DA-9154-43C7-B7E9-946691680259} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {FAB6D2C8-60F9-408A-BFD2-FEA4A08E837D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DSite.job => C:\Users\JB\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core.job => C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA.job => C:\Users\JB\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2013-03-26 16:44 - 2013-03-26 16:44 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2013-12-10 15:31 - 2013-12-10 13:19 - 02244096 _____ () C:\Program Files\AVAST Software\Avast\defs\13121000\algo.dll
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-07-28 04:49 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll
2011-07-28 04:51 - 2010-07-05 11:42 - 00203776 _____ () C:\Program Files (x86)\Samsung\Movie Color Enhancer\WinCRT.dll
2011-07-28 04:58 - 2010-05-07 15:22 - 01636864 _____ () C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll
2009-11-02 06:20 - 2009-11-02 06:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 06:23 - 2009-11-02 06:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00835584 _____ () C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00093696 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00094208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00057344 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00096256 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00062976 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00067072 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00158208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00312832 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00038912 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00073728 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll
2011-12-09 21:15 - 2013-08-01 17:08 - 00101888 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll
2013-12-10 16:29 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-12-10 16:29 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-12-10 16:29 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-12-10 16:29 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-12-10 16:29 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/10/2013 05:13:09 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1ddfa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005055a
ID des fehlerhaften Prozesses: 0x770
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (12/10/2013 03:27:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/09/2013 03:13:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 07:00:01 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "F:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (12/08/2013 11:56:06 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 01:14:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 10:14:49 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/04/2013 05:29:45 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/03/2013 04:12:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 08:57:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/06/2013 01:35:43 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (12/06/2013 10:16:04 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x80080005

Error: (12/06/2013 10:16:04 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (12/02/2013 04:59:05 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.20
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (12/01/2013 00:42:08 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.

Error: (12/01/2013 11:02:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/01/2013 11:02:39 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (11/30/2013 10:11:57 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.20
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (11/30/2013 10:09:19 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.20
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (11/27/2013 05:24:21 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b


Microsoft Office Sessions:
=========================
Error: (12/10/2013 05:13:09 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4SHELL32.dll6.1.7601.1822251f1ddfac0000005000000000005055a77001cef5b3ac0dd07bC:\windows\Explorer.EXEC:\windows\system32\SHELL32.dllf57f3153-61b5-11e3-89c6-e81132ca9b26

Error: (12/10/2013 03:27:00 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/09/2013 03:13:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 07:00:01 PM) (Source: Windows Backup)(User: )
Description: F:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (12/08/2013 11:56:06 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 01:14:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 10:14:49 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/04/2013 05:29:45 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/03/2013 04:12:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 08:57:29 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 6123.55 MB
Available physical RAM: 3792.43 MB
Total Pagefile: 12245.27 MB
Available Pagefile: 9704.03 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:201 GB) (Free:135.94 GB) NTFS
Drive d: () (Fixed) (Total:240.87 GB) (Free:239.3 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 23C4F13B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=201 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=241 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=24 GB) - (Type=27)

==================== End Of Log ============================

Aneri · 10.12.2013, 18:05

Hallo

bitte deinstalliere folgende Programme

Code:

ATTFilter

Java 7 Update 9 
Java Auto Updater 
Java(TM) 6 Update 35 
Spybot - Search & Destroy

sagen dir diese Programme etwas?

Code:

ATTFilter

Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912)
Основные компоненты Windows Live (x32 Version: 16.4.3505.0912)
Почта Windows Live (x32 Version: 16.4.3505.0912)
Фотоальбом (x32 Version: 16.4.3505.0912)
Фотогалерия (x32 Version: 16.4.3505.0912)
Фотографии (общедоступная версия) (x32 Version: 16.4.3505.0912)
גלריית התמונות (x32 Version: 16.4.3505.0912)
بريد Windows Live (x32 Version: 16.4.3505.0912)
معرض الصور (x32 Version: 16.4.3505.0912)
사진 갤러리 (x32 Version: 16.4.3505.0912)
影像中心 (x32 Version: 16.4.3505.0912)
照片库 (x32 Version: 16.4.3505.0912)

Schritt 2:

Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

Klicke auf Wählen Sie eine
Kopiere nun folgendes in die Suchleiste
Code:
ATTFilter
```
C:\Users\JB\AppData\Local\Temp\jsvhqpehtkkkdvaqu.exe
         
```
und klicke auf Öffnen.
Klicke auf Scannen!.
Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

Zitat:

Diese Datei wurde bereits von VirusTotal analysiert...

klicke auf Neu analysieren.
Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Schritt 3:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

akitojya · 10.12.2013, 19:09

Erstmal, wirklich herzlichen Dank, dass du deine Zeit hier für mein Problem opferst und versuchst es zu lösen!

Programme habe ich alle deinstalliert und die anderen Dateien/Programme sagen mir nicht's, sehen aber recht seltsam aus.

Schritt 2 hat nicht funktioniert, da die Datei nicht vorhanden war. Hoffe es war okeay, dass ich dann gleich zu Schritt 3 übergegangen bin?

Ansonsten hat bei Schritt 3 alles geklappt:

Code:

ATTFilter

ComboFix 13-12-10.01 - JB 10.12.2013  18:32:22.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6124.3778 [GMT 1:00]
ausgeführt von:: c:\users\JB\Desktop\ComboFix.exe
AV: Norton 360 Online *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 Online *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 Online *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\JB\AppData\Roaming\2433f433
c:\windows\jestertb.dll
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
D:\install.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
-------\Service_vpnagent
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-11-10 bis 2013-12-10  ))))))))))))))))))))))))))))))
.
.
2013-12-10 17:47 . 2013-12-10 17:47	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-12-10 16:20 . 2013-12-10 16:20	--------	d-----w-	C:\FRST
2013-12-10 15:29 . 2013-12-10 17:20	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2013-12-10 15:29 . 2013-12-10 17:48	--------	d-----w-	c:\program files (x86)\Spybot - Search & Destroy 2
2013-12-04 19:53 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2013-11-26 19:43 . 2013-09-04 12:11	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2013-11-26 19:43 . 2013-09-04 12:11	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2013-11-26 19:43 . 2013-09-04 12:11	52736	----a-w-	c:\windows\system32\drivers\usbehci.sys
2013-11-26 19:43 . 2013-09-04 12:12	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2013-11-26 19:43 . 2013-09-04 12:11	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2013-11-26 19:43 . 2013-09-04 12:11	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2013-11-26 19:43 . 2013-09-04 12:11	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2013-11-14 18:16 . 2013-09-28 01:09	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2013-11-14 18:16 . 2013-10-04 02:24	1930752	----a-w-	c:\windows\system32\authui.dll
2013-11-14 18:16 . 2013-10-04 02:28	190464	----a-w-	c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 18:16 . 2013-10-04 02:25	197120	----a-w-	c:\windows\system32\credui.dll
2013-11-14 18:16 . 2013-10-04 01:58	152576	----a-w-	c:\windows\SysWow64\SmartcardCredentialProvider.dll
2013-11-14 18:16 . 2013-10-04 01:56	1796096	----a-w-	c:\windows\SysWow64\authui.dll
2013-11-14 18:16 . 2013-10-04 01:56	168960	----a-w-	c:\windows\SysWow64\credui.dll
2013-11-14 18:11 . 2013-10-05 20:25	1474048	----a-w-	c:\windows\system32\crypt32.dll
2013-11-14 18:11 . 2013-10-05 19:57	1168384	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-11-14 18:11 . 2013-10-03 02:23	404480	----a-w-	c:\windows\system32\gdi32.dll
2013-11-14 18:11 . 2013-10-03 02:00	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2013-11-14 18:11 . 2013-10-12 02:29	859648	----a-w-	c:\windows\system32\IKEEXT.DLL
2013-11-14 18:11 . 2013-10-12 02:30	830464	----a-w-	c:\windows\system32\nshwfp.dll
2013-11-14 18:11 . 2013-10-12 02:29	324096	----a-w-	c:\windows\system32\FWPUCLNT.DLL
2013-11-14 18:11 . 2013-10-12 02:01	216576	----a-w-	c:\windows\SysWow64\FWPUCLNT.DLL
2013-11-14 18:11 . 2013-10-12 02:03	656896	----a-w-	c:\windows\SysWow64\nshwfp.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-01 13:42 . 2011-12-11 18:22	90708896	----a-w-	c:\windows\system32\MRT.exe
2013-10-10 18:25 . 2012-03-29 18:25	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-10 18:25 . 2011-12-11 16:38	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-28 14:48	281760	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2013-03-26 703888]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe;c:\windows\SYSNATIVE\SUPDSvc.exe [x]
R3 SipIMNDI;T-Home Dialerschutz VoIP Service;c:\windows\system32\DRIVERS\SipIMNDI64.sys;c:\windows\SYSNATIVE\DRIVERS\SipIMNDI64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 18:25]
.
2013-12-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core.job
- c:\users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-13 20:00]
.
2013-12-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA.job
- c:\users\JB\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-13 20:00]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-01-28 14:48	342176	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\JB\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-25 11895400]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://go.findrsearch.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
c:\program files (x86)\Samsung\Easy Display Manager\WifiManager.exe
c:\program files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
c:\program files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
c:\program files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
c:\program files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-12-10  18:58:42 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-12-10 17:58
.
Vor Suchlauf: 19 Verzeichnis(se), 149.319.274.496 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 148.866.228.224 Bytes frei
.
- - End Of File - - 671F1F486BDFC8D0CCEC887C354FEF9B

Aneri · 10.12.2013, 19:18

Ich hab mal recherche betrieben und bin der Meinung dass es sich hier um die Sprachen des Windows Live handelt...

bitte erstelle mit ein neues FRST Logfile und poste es hier

akitojya · 10.12.2013, 19:22

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by JB (administrator) on JB-PC on 10-12-2013 19:20:36
Running from C:\Users\JB\AppData\Local\Opera\Opera\temporary_downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-06-25] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.findrsearch.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKLM - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://go.findrsearch.com
CHR RestoreOnStartup: "sync": {
      "suppress_start"
CHR DefaultSearchKeyword: bing.com
CHR DefaultSearchProvider: Bing
CHR DefaultSearchURL: hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}
CHR DefaultSuggestURL: hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}
CHR Plugin: (Shockwave Flash) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\JB\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (WordCaptureX) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\npWCX.dll (Deskperience)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Java(TM) Platform SE 6 U35) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.350.10) - C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\JB\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Games Center) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb\1.0_0
CHR Extension: (Word CaptureX Extension) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Google Wallet) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx
CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-09-23] (Windows (R) 2003 DDK 3790 provider)
S3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI64.sys [28192 2009-10-15] (T-Systems International GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-10 18:58 - 2013-12-10 18:58 - 00019836 _____ C:\ComboFix.txt
2013-12-10 18:30 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2013-12-10 18:30 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2013-12-10 18:30 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-12-10 18:30 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-12-10 18:30 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-12-10 18:30 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2013-12-10 18:30 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2013-12-10 18:30 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2013-12-10 18:26 - 2013-12-10 18:58 - 00000000 ____D C:\Qoobox
2013-12-10 18:26 - 2013-12-10 18:55 - 00000000 ____D C:\windows\erdnt
2013-12-10 18:25 - 2013-12-10 18:25 - 05153140 ____R (Swearware) C:\Users\JB\Desktop\ComboFix.exe
2013-12-10 18:20 - 2013-12-10 18:20 - 00000085 _____ C:\windows\wininit.ini
2013-12-10 17:20 - 2013-12-10 17:20 - 00000000 ____D C:\FRST
2013-12-10 16:30 - 2013-12-10 16:30 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-12-10 16:29 - 2013-12-10 18:48 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-10 16:29 - 2013-12-10 18:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Neuer Ordner
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Mascara
2013-12-04 20:53 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE
2013-12-04 20:43 - 2013-12-04 20:43 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-04 20:41 - 2013-12-04 20:53 - 00010277 _____ C:\windows\IE11_main.log
2013-11-26 20:43 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-11-26 20:43 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-11-14 19:16 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 19:16 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-14 19:16 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-14 19:16 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 19:16 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-11-14 19:16 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-11-14 19:16 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-11-14 19:11 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-14 19:11 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-14 19:11 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-14 19:11 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-11-14 19:11 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 19:11 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-14 19:11 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-11-14 19:11 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-14 19:11 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-11-14 19:10 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-14 19:10 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-14 19:10 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-14 19:10 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-14 19:10 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-14 19:10 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-14 19:10 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-14 19:10 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-14 19:10 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-11-14 19:10 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-11-14 19:10 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-11-14 19:10 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-11-14 19:10 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-14 19:10 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-12-10 19:04 - 2012-09-13 21:01 - 00001108 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA.job
2013-12-10 18:58 - 2013-12-10 18:58 - 00019836 _____ C:\ComboFix.txt
2013-12-10 18:58 - 2013-12-10 18:26 - 00000000 ____D C:\Qoobox
2013-12-10 18:58 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-10 18:58 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-10 18:58 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-10 18:55 - 2013-12-10 18:26 - 00000000 ____D C:\windows\erdnt
2013-12-10 18:55 - 2011-07-28 20:31 - 02091299 _____ C:\windows\WindowsUpdate.log
2013-12-10 18:50 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2013-12-10 18:48 - 2013-12-10 16:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-10 18:48 - 2013-08-01 13:41 - 00010797 _____ C:\windows\setupact.log
2013-12-10 18:48 - 2013-08-01 13:40 - 00883664 _____ C:\windows\PFRO.log
2013-12-10 18:48 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-10 18:48 - 2009-07-14 03:34 - 70254592 _____ C:\windows\system32\config\SOFTWARE.bak
2013-12-10 18:48 - 2009-07-14 03:34 - 23330816 _____ C:\windows\system32\config\SYSTEM.bak
2013-12-10 18:48 - 2009-07-14 03:34 - 01048576 _____ C:\windows\system32\config\DEFAULT.bak
2013-12-10 18:48 - 2009-07-14 03:34 - 00262144 _____ C:\windows\system32\config\SECURITY.bak
2013-12-10 18:48 - 2009-07-14 03:34 - 00262144 _____ C:\windows\system32\config\SAM.bak
2013-12-10 18:25 - 2013-12-10 18:25 - 05153140 ____R (Swearware) C:\Users\JB\Desktop\ComboFix.exe
2013-12-10 18:23 - 2012-03-29 19:25 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-10 18:20 - 2013-12-10 18:20 - 00000085 _____ C:\windows\wininit.ini
2013-12-10 18:20 - 2013-12-10 16:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-10 17:20 - 2013-12-10 17:20 - 00000000 ____D C:\FRST
2013-12-10 17:13 - 2012-09-17 06:02 - 00000000 ____D C:\Users\JB\AppData\Local\CrashDumps
2013-12-10 17:11 - 2011-07-28 20:05 - 00700150 _____ C:\windows\system32\perfh007.dat
2013-12-10 17:11 - 2011-07-28 20:05 - 00149968 _____ C:\windows\system32\perfc007.dat
2013-12-10 17:11 - 2009-07-14 06:13 - 01622230 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-10 17:04 - 2012-09-13 21:01 - 00001056 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core.job
2013-12-10 16:30 - 2013-12-10 16:30 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-12-10 15:27 - 2013-08-01 13:28 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2013-12-09 15:37 - 2012-11-30 18:05 - 09396224 ___SH C:\Users\JB\Desktop\Thumbs.db
2013-12-08 21:20 - 2012-04-17 17:47 - 00000000 ____D C:\Users\JB\AppData\Roaming\Dropbox
2013-12-08 21:19 - 2012-04-17 17:52 - 00000000 ___RD C:\Users\JB\Dropbox
2013-12-08 14:44 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Neuer Ordner
2013-12-08 14:13 - 2013-12-08 14:13 - 00000000 ____D C:\Users\JB\Desktop\Mascara
2013-12-08 14:13 - 2011-12-09 21:08 - 00000000 ____D C:\Users\JB\AppData\Local\Windows Live
2013-12-06 13:13 - 2011-12-09 17:28 - 00001425 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-06 10:13 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-12-04 20:53 - 2013-12-04 20:41 - 00010277 _____ C:\windows\IE11_main.log
2013-12-04 20:43 - 2013-12-04 20:43 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-04 20:43 - 2013-12-04 20:43 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-04 20:43 - 2013-12-04 20:43 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-04 20:43 - 2013-12-04 20:43 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-04 20:43 - 2013-12-04 20:43 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-04 20:43 - 2013-12-04 20:43 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-04 20:43 - 2013-12-04 20:43 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-04 20:43 - 2013-12-04 20:43 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-01 17:47 - 2011-12-09 18:59 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-01 14:42 - 2011-12-11 19:22 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-28 16:59 - 2012-09-13 21:01 - 00004072 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000UA
2013-11-28 16:59 - 2012-09-13 21:01 - 00003676 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2027592733-4161651481-1790285415-1000Core
2013-11-25 17:45 - 2013-09-18 18:31 - 00000000 ____D C:\Users\JB\.gimp-2.8
2013-11-18 17:22 - 2013-08-09 07:42 - 00000000 ____D C:\windows\system32\MRT

Files to move or delete:
====================
C:\Users\JB\NPE.exe
C:\Users\JB\Opera 1164.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-04 21:30

==================== End Of Log ============================

--- --- ---

Aneri · 10.12.2013, 19:59

tritt das Problem mit den spam mails noch auf?

Schritt 1:
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3:
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Aneri · 14.12.2013, 13:05

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Hinweis: Wir sind noch nicht fertig! Auch wenn die Symptome verschwunden sein sollten, kann dein System weiterhin infiziert sein und über Sicherheitslücken verfügen, welche eine erneute Infektion möglich machen.

akitojya · 14.12.2013, 14:48

Ich habe nun alle Schädlinge auf meinem PC entfernen können und die Spammails haben auch aufgehört.
Deswegen danke ich dir für deine Hilfe! :> Und wünsche dir noch ein schönes Wochenende!

Aneri · 14.12.2013, 14:56

Ich würde das System noch gern mit dir absichern

Aneri · 19.12.2013, 21:56

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomm ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen

10.12.2013, 19:18	#6
Aneri /// Malwareteam	E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten. Ich hab mal recherche betrieben und bin der Meinung dass es sich hier um die Sprachen des Windows Live handelt... bitte erstelle mit ein neues FRST Logfile und poste es hier __________________ --> E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten.

14.12.2013, 14:56	#11
Aneri /// Malwareteam	E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten. Ich würde das System noch gern mit dir absichern __________________ Gruß Aneri Mitglied von UNITE Lob oder Kritik? hier wirst du es los

E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten.

Plagegeister aller Art und deren Bekämpfung: E-Mail Konto bei Telekom verschickt in meinem Namen Spam Nachrichten.