Werbung auf Homepages und unerwünsche Öffnung von Fenster

Danny2014 · 16.01.2014, 19:23

Hallo Schrauber,
habe Mozilla Firefox komplett gelöscht. Hier kommt nun der frische FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03
Ran by Danny_Master (administrator) on DANNY_MASTER-PC on 16-01-2014 19:20:03
Running from C:\Users\Danny_Master\Desktop\Sicherheit
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\psksvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\TPSrvWow.exe
(Panda Security) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\WebProxy.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
() C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PsCtrlS.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PavFnSvr.exe
(Panda Security, S.L.) C:\Program Files (x86)\Common Files\Panda Security\PavShld\PavPrSrv.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\pavsrvx86.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\AVENGINE.EXE
() C:\Windows\SysWOW64\PnkBstrB.exe
(Panda Security International) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\FIREWALL\PSHost.exe
(Panda Security S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PsImSvc.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Danny_Master\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Akamai Technologies, Inc.) C:\Users\Danny_Master\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\ApVxdWin.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\SrvLoad.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PavBckPT.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Panda Security S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\avciman.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\TPSrvAux.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Cam - Danny\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [Ulead Memory Card Detector] - C:\Program Files (x86)\Ulead Systems\Ulead Photo Explorer 8.0\Monitor.exe [49152 2002-12-10] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2236816 2013-07-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [APVXDWIN] - C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\APVXDWIN.EXE [1037600 2012-11-27] (Panda Security, S.L.)
HKLM-x32\...\Run: [SCANINICIO] - C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\Inicio.exe [70432 2012-11-08] (Panda Security, S.L.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
Winlogon\Notify\avldr: C:\Windows\system32\avldr64.dll (On-Access Anti-Malware Scanner Sync)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKCU\...\Run: [Logitech Vid HD] - C:\Program Files (x86)\Cam - Danny\Vid\vid.exe [6061400 2010-05-11] (Logitech Inc.)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Cam - Danny\Vid\Vid.exe [6061400 2010-05-11] (Logitech Inc.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Danny_Master\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1641896 2013-06-06] (Valve Corporation)
HKCU\...\Run: [icq] - C:\Users\Danny_Master\AppData\Roaming\ICQM\icq.exe [27598184 2013-04-17] (ICQ)
HKCU\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
Startup: C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x89334CDAF50CCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: ggreatsaver - {2171678F-C788-0ECC-66F0-B479A5915DE1} - C:\Program Files (x86)\ggreatsaver\dNx.x64.dll No File
BHO: SNT - {7CBD7177-E1E1-989C-DC42-3F667B39E635} - C:\Program Files (x86)\SNT\smevP.x64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: YoutubeAdblocker - {D768AB8E-36E3-85C6-2956-D2C142986487} - C:\Program Files (x86)\YoutubeAdblocker\F.x64.dll No File
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.5.109 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.5.109 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll No File
FF Plugin HKCU: @protectdisc.com/NPMPDRM - C:\Users\Danny_Master\AppData\Local\mpDRM\Binaries\NPMPDRM.dll ( )
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\Danny_Master\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\PROGRA~2\MOZILL~1\plugins\NpFv522.dll No File
FF SearchPlugin: C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\searchplugins\searchplugins-backup
FF Extension: Gutscheinrausch.de - C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\Extensions\mail@gutscheinrausch.de [2011-05-07]
FF Extension: gReeatsavero - C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\Extensions\oaiu6ayfazo@uupwwq-f.org [2014-01-02]
FF Extension: SNT - C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\Extensions\qqrucdbv@eyyu-jfpa.com [2014-01-02]
FF Extension: YoutubeAdblocker - C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\Extensions\znuead@hmyei.org [2014-01-02]
FF Extension: ICQ Sparberater - C:\Users\Danny_Master\AppData\Roaming\Mozilla\Firefox\Profiles\90qogeo0.default\Extensions\ciuvo-extension@icq.de.xpi [2012-03-05]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-16]
FF HKLM-x32\...\Firefox\Extensions: [{C3949AC2-4B17-43ee-B4F1-D26B9D42404D}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-07-13]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

Chrome: 
=======
CHR Extension: (RealDownloader) - C:\Users\Danny_Master\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 [2014-01-12]
CHR Extension: (Google Wallet) - C:\Users\Danny_Master\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2014-01-12]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [153600 2010-09-17] (Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [5624320 2010-09-17] (Firebird Project)
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.1\my.ini [8919 2011-05-07] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4066168 2011-04-24] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 Panda Software Controller; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PsCtrls.exe [177440 2012-11-19] (Panda Security, S.L.)
R2 PAVFNSVR; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PavFnSvr.exe [202016 2012-09-21] (Panda Security, S.L.)
R2 PavPrSrv; C:\Program Files (x86)\Common Files\Panda Security\PavShld\pavprsrv.exe [62768 2008-02-04] (Panda Security, S.L.)
R2 PAVSRV; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\pavsrvx86.exe [313664 2011-04-13] (Panda Security, S.L.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2011-12-19] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2011-12-19] ()
R2 PSHost; c:\program files (x86)\panda security\panda internet security 2013\firewall\PSHOST.EXE [226560 2009-11-26] (Panda Security International)
R2 PSIMSVC; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PsImSvc.exe [108288 2008-06-19] (Panda Security S.L.)
R2 PskSvcRetail; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\PskSvc.exe [28992 2010-08-16] (Panda Security, S.L.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 TPSrv; C:\Program Files (x86)\Panda Security\Panda Internet Security 2013\TPSrvWow.exe [173344 2012-11-16] (Panda Security, S.L.)
S2 e81a9dc1; "C:\Windows\system32\rundll32.exe" "c:\progra~2\gs-ena~1\AssistantSvc.dll",service

==================== Drivers (Whitelisted) ====================

R2 AmFSM; C:\Windows\System32\DRIVERS\amm6460.sys [71432 2012-03-26] (Panda Security, S.L.)
R2 APPFLT; C:\Windows\system32\Drivers\APPFLT64.SYS [129096 2011-01-31] (Panda Security, S.L.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [39768 2013-02-18] (AVG Technologies)
R2 ComFiltr; C:\Windows\system32\DRIVERS\COMFiltr.sys [15928 2014-01-03] ()
R2 DSAFLT; C:\Windows\system32\Drivers\DSAFLT64.SYS [82952 2009-09-25] (Panda Security, S.L.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-05-07] (DT Soft Ltd)
R2 FNETMON; C:\Windows\system32\Drivers\fnetm64.SYS [31752 2009-09-25] (Panda Security, S.L.)
R2 IDSFLT; C:\Windows\system32\Drivers\IDSFLT64.SYS [78920 2010-09-09] (Panda Security, S.L.)
R2 NETFLTDI; C:\Windows\system32\Drivers\NETTDI64.SYS [170504 2009-09-25] (Panda Security, S.L.)
R3 NETIMFLT01060044; C:\Windows\System32\DRIVERS\n64i1644.sys [216648 2010-09-01] (Panda Security, S.L.)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R0 pavboot; C:\Windows\System32\Drivers\pavboot64.sys [30792 2010-06-22] (Panda Security, S.L.)
R1 ShldFlt; C:\Windows\System32\DRIVERS\ShldFlt.sys [48136 2009-10-27] (Panda Security, S.L.)
R2 WNMFLT; C:\Windows\system32\Drivers\WNMFLT64.SYS [74760 2009-09-25] (Panda Security, S.L.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-DE\GameGuard\dump_wmimmc.sys [x]
R3 PavTPK.sys; \??\C:\Windows\system32\PavTPK.sys [x]
R3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 19:03 - 2014-01-16 19:03 - 00001264 _____ C:\Users\Danny_Master\Desktop\Revo Uninstaller.lnk
2014-01-16 19:03 - 2014-01-16 19:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2014-01-16 19:02 - 2014-01-16 19:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Danny_Master\Desktop\revosetup95.exe
2014-01-16 17:30 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 17:30 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 17:30 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 17:30 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 15:24 - 2014-01-13 21:15 - 00000000 ____D C:\Users\Danny_Master\Desktop\wizard
2014-01-10 18:41 - 2014-01-10 18:41 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-09 17:11 - 2014-01-09 17:11 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\NVIDIA Corporation
2014-01-09 17:08 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-09 17:08 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-09 17:07 - 2014-01-09 17:11 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\NVIDIA
2014-01-09 17:07 - 2014-01-09 17:07 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-09 16:57 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-09 16:57 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-09 16:57 - 2013-12-19 21:33 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2014-01-09 16:57 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-09 16:57 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-09 16:57 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-09 16:57 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-09 16:57 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-09 16:57 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-08 22:30 - 2014-01-08 22:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-08 22:18 - 2014-01-08 22:20 - 00000000 ____D C:\AdwCleaner
2014-01-08 16:22 - 2014-01-08 16:22 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Malwarebytes
2014-01-08 16:22 - 2014-01-08 16:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-08 16:22 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-06 20:09 - 2014-01-06 20:09 - 00040790 _____ C:\ComboFix.txt
2014-01-06 19:37 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-06 19:37 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-06 19:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-06 19:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-06 19:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-06 19:37 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-06 19:37 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-06 19:37 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-06 19:36 - 2014-01-06 20:09 - 00000000 ____D C:\Qoobox
2014-01-06 19:36 - 2014-01-06 20:03 - 00000000 ____D C:\Windows\erdnt
2014-01-05 13:53 - 2014-01-05 14:37 - 00000000 ____D C:\Users\Danny_Master\Documents\World in Conflict
2014-01-05 13:50 - 2014-01-05 13:51 - 00040410 _____ C:\Windows\DirectX.log
2014-01-05 13:40 - 2014-01-05 13:40 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2014-01-05 12:30 - 2014-01-05 12:30 - 00002558 _____ C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG (2).lnk
2014-01-05 11:25 - 2014-01-16 19:19 - 00000000 ____D C:\FRST
2014-01-05 10:08 - 2014-01-05 10:08 - 00000000 ____D C:\ProgramData\Panda Software
2014-01-05 09:38 - 2014-01-05 09:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-05 09:36 - 2014-01-05 10:13 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-04 20:48 - 2014-01-05 12:24 - 00002558 _____ C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG.lnk
2014-01-04 20:48 - 2014-01-04 20:48 - 00000000 ____D C:\Users\Public\Sony Online Entertainment
2014-01-04 20:48 - 2014-01-04 20:48 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\SCE
2014-01-03 16:18 - 2014-01-14 17:09 - 00008627 _____ C:\Windows\SysWOW64\PAV_FOG.OPC
2014-01-03 16:05 - 2014-01-16 18:57 - 00000080 _____ C:\Windows\system32\Drivers\etc\NetLoc.wlt.bck
2014-01-03 16:05 - 2014-01-16 18:57 - 00000080 _____ C:\Windows\system32\Drivers\etc\NetLoc.wlt
2014-01-03 16:05 - 2014-01-16 18:57 - 00000056 _____ C:\Windows\system32\Drivers\etc\WnmFlt.cfg.bck
2014-01-03 16:05 - 2014-01-16 18:57 - 00000056 _____ C:\Windows\system32\Drivers\etc\WnmFlt.cfg
2014-01-03 16:05 - 2014-01-16 18:57 - 00000056 _____ C:\Windows\system32\Drivers\etc\DsaFlt.cfg.bck
2014-01-03 16:05 - 2014-01-16 18:57 - 00000056 _____ C:\Windows\system32\Drivers\etc\DsaFlt.cfg
2014-01-03 16:04 - 2014-01-16 18:57 - 00000252 _____ C:\Windows\system32\Drivers\etc\IdsFlt.cfg.bck
2014-01-03 16:04 - 2014-01-16 18:57 - 00000252 _____ C:\Windows\system32\Drivers\etc\IdsFlt.cfg
2014-01-03 16:02 - 2014-01-16 18:52 - 00000120 _____ C:\Windows\system32\Drivers\etc\NetAdapt.cfg.bck
2014-01-03 16:02 - 2014-01-16 18:52 - 00000120 _____ C:\Windows\system32\Drivers\etc\NetAdapt.cfg
2014-01-03 16:02 - 2014-01-16 18:52 - 00000064 _____ C:\Windows\system32\Drivers\etc\NetAR.wlt.bck
2014-01-03 16:02 - 2014-01-16 18:52 - 00000064 _____ C:\Windows\system32\Drivers\etc\NetAR.wlt
2014-01-03 16:01 - 2014-01-16 18:57 - 00000068 _____ C:\Windows\system32\Drivers\etc\NetFlt.cfg.bck
2014-01-03 16:01 - 2014-01-16 18:57 - 00000068 _____ C:\Windows\system32\Drivers\etc\NetFlt.cfg
2014-01-03 15:55 - 2014-01-03 15:55 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeAnywhere Drive
2014-01-03 15:54 - 2014-01-03 15:55 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\BeAnywhere_Drive
2014-01-03 15:54 - 2014-01-03 15:54 - 00000000 ____D C:\Windows\FltMgr
2014-01-03 15:54 - 2014-01-03 15:54 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Panda Security
2014-01-03 15:53 - 2014-01-03 15:53 - 00015928 _____ C:\Windows\system32\Drivers\COMFiltr.sys
2014-01-03 15:53 - 2014-01-03 15:53 - 00000274 _____ C:\Windows\system32\PavCPL64.dat
2014-01-03 15:52 - 2014-01-16 19:19 - 00347912 _____ C:\Windows\system32\Drivers\APPFCONT.DAT.bck
2014-01-03 15:52 - 2014-01-16 19:19 - 00347912 _____ C:\Windows\system32\Drivers\APPFCONT.DAT
2014-01-03 15:52 - 2014-01-16 18:57 - 00303044 _____ C:\Windows\system32\Drivers\etc\DsaFlt.rls.bck
2014-01-03 15:52 - 2014-01-16 18:57 - 00303044 _____ C:\Windows\system32\Drivers\etc\DsaFlt.rls
2014-01-03 15:52 - 2014-01-16 18:57 - 00001132 _____ C:\Windows\system32\Drivers\APPFLTR.CFG.bck
2014-01-03 15:52 - 2014-01-16 18:57 - 00001132 _____ C:\Windows\system32\Drivers\APPFLTR.CFG
2014-01-03 15:52 - 2014-01-03 15:52 - 00000000 ____D C:\ProgramData\Backup
2014-01-03 15:52 - 2011-01-31 15:41 - 00129096 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\APPFLT64.SYS
2014-01-03 15:52 - 2010-09-09 15:23 - 00078920 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\idsflt64.sys
2014-01-03 15:52 - 2010-06-22 17:20 - 00030792 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\pavboot64.sys
2014-01-03 15:52 - 2009-09-25 13:54 - 00170504 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\NETTDI64.SYS
2014-01-03 15:52 - 2009-09-25 13:54 - 00082952 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\dsaflt64.sys
2014-01-03 15:52 - 2009-09-25 13:54 - 00074760 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\wnmflt64.sys
2014-01-03 15:52 - 2009-09-25 13:54 - 00031752 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\fnetm64.sys
2014-01-03 15:50 - 2014-01-03 15:52 - 00000000 ____D C:\Program Files (x86)\Panda Security
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\Windows\SysWOW64\PAV
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Panda Security
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\ProgramData\Panda Security
2014-01-03 15:50 - 2012-11-20 11:20 - 00545056 _____ (Panda Security, S.L.) C:\Windows\SysWOW64\PavSHookWow.dll
2014-01-03 15:50 - 2012-11-16 11:08 - 00837920 _____ (Panda Security, S.L.) C:\Windows\system32\PavSHook64.dll
2014-01-03 15:50 - 2012-05-22 14:54 - 00087328 _____ (Panda Security, S.L.) C:\Windows\SysWOW64\PavLspHookWow.dll
2014-01-03 15:50 - 2012-05-22 14:52 - 00117024 _____ (Panda Security, S.L.) C:\Windows\system32\PavLspHook64.dll
2014-01-03 15:50 - 2012-04-20 12:42 - 00024064 _____ (Panda Security, S.L.) C:\Windows\system32\sysHelper64.dll
2014-01-03 15:50 - 2012-03-26 17:57 - 00071432 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\amm6460.sys
2014-01-03 15:50 - 2010-09-01 10:09 - 00216648 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\n64i1644.sys
2014-01-03 15:50 - 2010-06-21 16:02 - 00323392 _____ (Panda Security, S.L.) C:\Windows\system32\TpUtil64.dll
2014-01-03 15:50 - 2010-06-21 16:02 - 00202048 _____ (Panda Security, S.L.) C:\Windows\SysWOW64\TpUtilWow.dll
2014-01-03 15:50 - 2010-06-21 16:01 - 00090944 _____ (Panda Security, S.L.) C:\Windows\system32\PavIpc64.dll
2014-01-03 15:50 - 2010-06-21 16:01 - 00066880 _____ (Panda Security, S.L.) C:\Windows\SysWOW64\PavIpcWow.dll
2014-01-03 15:50 - 2010-03-24 11:56 - 00064768 _____ (On-Access Anti-Malware Scanner Sync) C:\Windows\system32\avldr64.dll
2014-01-03 15:50 - 2009-08-10 12:46 - 00025344 _____ (Panda Security, S.L.) C:\Windows\SysWOW64\sysHelper32.dll
2014-01-03 15:50 - 2007-03-15 18:38 - 00046640 _____ (Panda Software) C:\Windows\system32\pavcpl64.cpl
2014-01-03 15:50 - 2003-10-22 17:23 - 00446464 _____ (eHelp Corporation.) C:\Windows\SysWOW64\HHActiveX.dll
2014-01-03 15:49 - 2009-10-27 11:07 - 00048136 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\ShldFlt.sys
2014-01-02 15:39 - 2014-01-02 15:39 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-02 15:24 - 2014-01-02 15:24 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\tor
2014-01-02 15:05 - 2014-01-08 22:00 - 00000000 ____D C:\Program Files (x86)\SNT
2014-01-02 15:05 - 2014-01-03 17:32 - 00000000 ____D C:\ProgramData\SNT
2014-01-02 15:03 - 2014-01-08 22:03 - 00000000 ____D C:\Program Files (x86)\GS-Enabler
2014-01-02 15:02 - 2014-01-08 22:00 - 00000000 ____D C:\Program Files (x86)\ggreatsaver
2014-01-02 15:02 - 2014-01-03 17:32 - 00000000 ____D C:\ProgramData\ggreatsaver
2014-01-02 15:02 - 2014-01-02 15:02 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Packages
2014-01-02 15:01 - 2014-01-02 15:05 - 00000000 ____D C:\ProgramData\df88d4382d2aee59
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator
2014-01-02 15:00 - 2014-01-02 15:05 - 00000000 ____D C:\ProgramData\InstallMate
2013-12-28 21:49 - 2013-12-28 22:16 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Audacity
2013-12-25 17:25 - 2013-12-25 17:25 - 00000000 ____D C:\ProgramData\phpDesigner
2013-12-23 19:58 - 2013-12-26 00:20 - 00000000 ____D C:\Users\Danny_Master\Desktop\Neue_Pape
2013-12-22 12:03 - 2013-12-23 10:40 - 00000000 ____D C:\Users\Danny_Master\Desktop\Für CD
2013-12-21 20:04 - 2014-01-16 18:54 - 00003390 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-21 20:04 - 2014-01-16 18:54 - 00003270 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-21 20:04 - 2013-12-21 20:04 - 00003410 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-20 15:32 - 2013-12-20 15:46 - 00000000 ____D C:\Users\Danny_Master\Desktop\Nino - Played-A-Live
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-17 18:15 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-17 18:15 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-17 18:15 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-17 18:14 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-17 18:10 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-17 18:10 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-17 18:10 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-17 18:10 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-17 18:10 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-17 18:10 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-17 18:10 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-17 18:10 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-17 18:10 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-17 18:10 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-17 18:10 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-17 18:10 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-17 18:10 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-17 18:10 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-17 18:10 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-17 18:10 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-17 18:10 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-17 18:10 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-17 18:10 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-17 18:10 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-17 18:10 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-17 18:10 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-17 18:10 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-17 18:10 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-17 18:10 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-17 18:10 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-17 18:10 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-17 18:09 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-17 18:09 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-17 18:09 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-17 18:09 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-17 16:35 - 2013-12-22 12:50 - 00000287 _____ C:\Users\Danny_Master\Desktop\Passwörter.txt
2013-12-17 16:30 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-17 16:30 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-17 16:30 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-17 16:30 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-17 16:30 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-17 16:30 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-17 16:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-17 16:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-17 16:30 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-17 16:30 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-17 16:30 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-17 16:30 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-17 16:30 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-17 16:30 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-17 16:30 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-17 16:30 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-17 16:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-17 16:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-16 19:20 - 2011-05-07 21:41 - 00000000 ___RD C:\Users\Danny_Master\Desktop\Sicherheit
2014-01-16 19:19 - 2014-01-05 11:25 - 00000000 ____D C:\FRST
2014-01-16 19:19 - 2014-01-03 15:52 - 00347912 _____ C:\Windows\system32\Drivers\APPFCONT.DAT.bck
2014-01-16 19:19 - 2014-01-03 15:52 - 00347912 _____ C:\Windows\system32\Drivers\APPFCONT.DAT
2014-01-16 19:05 - 2012-11-25 13:57 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-16 19:03 - 2014-01-16 19:03 - 00001264 _____ C:\Users\Danny_Master\Desktop\Revo Uninstaller.lnk
2014-01-16 19:03 - 2014-01-16 19:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2014-01-16 19:02 - 2014-01-16 19:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Danny_Master\Desktop\revosetup95.exe
2014-01-16 19:00 - 2012-04-04 15:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-16 19:00 - 2009-07-14 05:45 - 00019792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-16 19:00 - 2009-07-14 05:45 - 00019792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-16 18:57 - 2014-01-03 16:05 - 00000080 _____ C:\Windows\system32\Drivers\etc\NetLoc.wlt.bck
2014-01-16 18:57 - 2014-01-03 16:05 - 00000080 _____ C:\Windows\system32\Drivers\etc\NetLoc.wlt
2014-01-16 18:57 - 2014-01-03 16:05 - 00000056 _____ C:\Windows\system32\Drivers\etc\WnmFlt.cfg.bck
2014-01-16 18:57 - 2014-01-03 16:05 - 00000056 _____ C:\Windows\system32\Drivers\etc\WnmFlt.cfg
2014-01-16 18:57 - 2014-01-03 16:05 - 00000056 _____ C:\Windows\system32\Drivers\etc\DsaFlt.cfg.bck
2014-01-16 18:57 - 2014-01-03 16:05 - 00000056 _____ C:\Windows\system32\Drivers\etc\DsaFlt.cfg
2014-01-16 18:57 - 2014-01-03 16:04 - 00000252 _____ C:\Windows\system32\Drivers\etc\IdsFlt.cfg.bck
2014-01-16 18:57 - 2014-01-03 16:04 - 00000252 _____ C:\Windows\system32\Drivers\etc\IdsFlt.cfg
2014-01-16 18:57 - 2014-01-03 16:01 - 00000068 _____ C:\Windows\system32\Drivers\etc\NetFlt.cfg.bck
2014-01-16 18:57 - 2014-01-03 16:01 - 00000068 _____ C:\Windows\system32\Drivers\etc\NetFlt.cfg
2014-01-16 18:57 - 2014-01-03 15:52 - 00303044 _____ C:\Windows\system32\Drivers\etc\DsaFlt.rls.bck
2014-01-16 18:57 - 2014-01-03 15:52 - 00303044 _____ C:\Windows\system32\Drivers\etc\DsaFlt.rls
2014-01-16 18:57 - 2014-01-03 15:52 - 00001132 _____ C:\Windows\system32\Drivers\APPFLTR.CFG.bck
2014-01-16 18:57 - 2014-01-03 15:52 - 00001132 _____ C:\Windows\system32\Drivers\APPFLTR.CFG
2014-01-16 18:55 - 2013-02-18 10:46 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 18:54 - 2013-12-21 20:04 - 00003390 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2354404794-1791117496-458446774-1000
2014-01-16 18:54 - 2013-12-21 20:04 - 00003270 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2354404794-1791117496-458446774-1000
2014-01-16 18:53 - 2012-11-25 13:57 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-16 18:52 - 2014-01-03 16:02 - 00000120 _____ C:\Windows\system32\Drivers\etc\NetAdapt.cfg.bck
2014-01-16 18:52 - 2014-01-03 16:02 - 00000120 _____ C:\Windows\system32\Drivers\etc\NetAdapt.cfg
2014-01-16 18:52 - 2014-01-03 16:02 - 00000064 _____ C:\Windows\system32\Drivers\etc\NetAR.wlt.bck
2014-01-16 18:52 - 2014-01-03 16:02 - 00000064 _____ C:\Windows\system32\Drivers\etc\NetAR.wlt
2014-01-16 18:52 - 2013-09-01 12:04 - 00005631 _____ C:\Windows\setupact.log
2014-01-16 18:52 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-16 18:51 - 2011-05-07 15:05 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-16 18:49 - 2013-08-11 12:14 - 01210918 _____ C:\Windows\WindowsUpdate.log
2014-01-16 18:44 - 2009-07-14 05:45 - 00419392 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 18:11 - 2011-05-09 16:10 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\FileZilla
2014-01-16 18:10 - 2011-05-07 17:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-16 18:01 - 2013-08-14 16:13 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 18:01 - 2011-05-07 15:59 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 17:39 - 2011-10-22 09:47 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\UseNeXT
2014-01-16 17:29 - 2011-05-12 17:03 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Adobe
2014-01-14 17:09 - 2014-01-03 16:18 - 00008627 _____ C:\Windows\SysWOW64\PAV_FOG.OPC
2014-01-14 16:35 - 2013-09-02 00:34 - 00000000 ____D C:\Users\Danny_Master\Desktop\AutoDJ
2014-01-13 21:15 - 2014-01-12 15:24 - 00000000 ____D C:\Users\Danny_Master\Desktop\wizard
2014-01-10 18:41 - 2014-01-10 18:41 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-09 17:31 - 2013-09-01 12:04 - 00227120 _____ C:\Windows\PFRO.log
2014-01-09 17:11 - 2014-01-09 17:11 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\NVIDIA Corporation
2014-01-09 17:11 - 2014-01-09 17:07 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\NVIDIA
2014-01-09 17:11 - 2011-05-07 15:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-09 17:08 - 2011-05-07 15:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-09 17:08 - 2011-05-07 14:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-09 17:07 - 2014-01-09 17:07 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-09 16:46 - 2011-05-07 23:37 - 00000000 ____D C:\Users\Danny_Master\Desktop\Sonstiges
2014-01-09 16:41 - 2013-06-18 16:41 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2014-01-08 22:30 - 2014-01-08 22:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-08 22:20 - 2014-01-08 22:18 - 00000000 ____D C:\AdwCleaner
2014-01-08 22:20 - 2012-02-26 13:45 - 00000000 ____D C:\ProgramData\ICQ
2014-01-08 22:03 - 2014-01-02 15:03 - 00000000 ____D C:\Program Files (x86)\GS-Enabler
2014-01-08 22:00 - 2014-01-02 15:05 - 00000000 ____D C:\Program Files (x86)\SNT
2014-01-08 22:00 - 2014-01-02 15:02 - 00000000 ____D C:\Program Files (x86)\ggreatsaver
2014-01-08 17:23 - 2010-05-31 08:51 - 00699416 _____ C:\Windows\system32\perfh007.dat
2014-01-08 17:23 - 2010-05-31 08:51 - 00149556 _____ C:\Windows\system32\perfc007.dat
2014-01-08 17:23 - 2009-07-14 06:13 - 01641494 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-08 17:20 - 2012-01-01 19:01 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-08 16:22 - 2014-01-08 16:22 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Malwarebytes
2014-01-08 16:22 - 2014-01-08 16:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-06 20:09 - 2014-01-06 20:09 - 00040790 _____ C:\ComboFix.txt
2014-01-06 20:09 - 2014-01-06 19:36 - 00000000 ____D C:\Qoobox
2014-01-06 20:09 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-06 20:03 - 2014-01-06 19:36 - 00000000 ____D C:\Windows\erdnt
2014-01-06 20:01 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-06 19:59 - 2012-07-09 19:30 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\convert
2014-01-05 14:37 - 2014-01-05 13:53 - 00000000 ____D C:\Users\Danny_Master\Documents\World in Conflict
2014-01-05 13:51 - 2014-01-05 13:50 - 00040410 _____ C:\Windows\DirectX.log
2014-01-05 13:40 - 2014-01-05 13:40 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2014-01-05 12:30 - 2014-01-05 12:30 - 00002558 _____ C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG (2).lnk
2014-01-05 12:24 - 2014-01-04 20:48 - 00002558 _____ C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG.lnk
2014-01-05 10:13 - 2014-01-05 09:36 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-05 10:09 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\addins
2014-01-05 10:08 - 2014-01-05 10:08 - 00000000 ____D C:\ProgramData\Panda Software
2014-01-05 09:38 - 2014-01-05 09:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 20:48 - 2014-01-04 20:48 - 00000000 ____D C:\Users\Public\Sony Online Entertainment
2014-01-04 20:48 - 2014-01-04 20:48 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\SCE
2014-01-03 17:32 - 2014-01-02 15:05 - 00000000 ____D C:\ProgramData\SNT
2014-01-03 17:32 - 2014-01-02 15:02 - 00000000 ____D C:\ProgramData\ggreatsaver
2014-01-03 16:34 - 2013-08-20 16:38 - 00001912 _____ C:\Windows\epplauncher.mif
2014-01-03 15:55 - 2014-01-03 15:55 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeAnywhere Drive
2014-01-03 15:55 - 2014-01-03 15:54 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\BeAnywhere_Drive
2014-01-03 15:55 - 2009-07-14 03:34 - 00000535 _____ C:\Windows\win.ini
2014-01-03 15:54 - 2014-01-03 15:54 - 00000000 ____D C:\Windows\FltMgr
2014-01-03 15:54 - 2014-01-03 15:54 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Panda Security
2014-01-03 15:53 - 2014-01-03 15:53 - 00015928 _____ C:\Windows\system32\Drivers\COMFiltr.sys
2014-01-03 15:53 - 2014-01-03 15:53 - 00000274 _____ C:\Windows\system32\PavCPL64.dat
2014-01-03 15:52 - 2014-01-03 15:52 - 00000000 ____D C:\ProgramData\Backup
2014-01-03 15:52 - 2014-01-03 15:50 - 00000000 ____D C:\Program Files (x86)\Panda Security
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\Windows\SysWOW64\PAV
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Panda Security
2014-01-03 15:50 - 2014-01-03 15:50 - 00000000 ____D C:\ProgramData\Panda Security
2014-01-03 15:50 - 2011-05-07 15:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-03 11:04 - 2012-04-06 10:07 - 00000000 ___RD C:\Users\Danny_Master\Dropbox
2014-01-03 11:04 - 2012-04-06 10:05 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Dropbox
2014-01-02 15:39 - 2014-01-02 15:39 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-02 15:24 - 2014-01-02 15:24 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\tor
2014-01-02 15:05 - 2014-01-02 15:01 - 00000000 ____D C:\ProgramData\df88d4382d2aee59
2014-01-02 15:05 - 2014-01-02 15:00 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-02 15:02 - 2014-01-02 15:02 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Packages
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Gast
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-02 15:01 - 2014-01-02 15:01 - 00000000 ____D C:\Users\Administrator
2014-01-02 15:01 - 2012-11-25 13:57 - 00000000 ____D C:\Users\Danny_Master\AppData\Local\Google
2014-01-01 14:23 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-28 22:16 - 2013-12-28 21:49 - 00000000 ____D C:\Users\Danny_Master\AppData\Roaming\Audacity
2013-12-26 00:20 - 2013-12-23 19:58 - 00000000 ____D C:\Users\Danny_Master\Desktop\Neue_Pape
2013-12-25 17:25 - 2013-12-25 17:25 - 00000000 ____D C:\ProgramData\phpDesigner
2013-12-23 16:52 - 2011-10-18 20:16 - 00000000 ___SD C:\Users\Danny_Master\Documents\Meine Websites
2013-12-23 10:40 - 2013-12-22 12:03 - 00000000 ____D C:\Users\Danny_Master\Desktop\Für CD
2013-12-22 12:50 - 2013-12-17 16:35 - 00000287 _____ C:\Users\Danny_Master\Desktop\Passwörter.txt
2013-12-21 20:04 - 2013-12-21 20:04 - 00003410 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-21 20:04 - 2013-01-13 13:09 - 00003368 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-21 20:04 - 2013-01-13 13:09 - 00003248 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2354404794-1791117496-458446774-1000
2013-12-20 15:46 - 2013-12-20 15:32 - 00000000 ____D C:\Users\Danny_Master\Desktop\Nino - Played-A-Live
2013-12-20 15:32 - 2011-10-22 09:47 - 00000000 ____D C:\Program Files (x86)\UseNeXT
2013-12-19 21:33 - 2014-01-09 16:57 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-19 21:33 - 2014-01-09 16:57 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-12-19 21:33 - 2014-01-09 16:57 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-12-19 21:33 - 2012-10-10 21:23 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-12-19 21:33 - 2012-03-21 16:43 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-12-19 21:33 - 2011-05-07 15:03 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-12-19 21:33 - 2011-05-07 15:03 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-12-19 19:53 - 2011-04-07 22:19 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-12-19 19:53 - 2011-04-07 22:19 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-12-19 19:53 - 2011-04-07 22:19 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-12-19 19:53 - 2011-04-07 22:19 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-12-19 19:53 - 2011-04-07 22:19 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-12-19 19:53 - 2011-04-07 22:18 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-12-19 06:01 - 2012-03-21 16:45 - 03539040 _____ C:\Windows\system32\nvcoproc.bin
2013-12-18 17:29 - 2011-12-29 22:24 - 02875392 ___SH C:\Users\Danny_Master\Desktop\Thumbs.db
2013-12-18 15:53 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-17 18:01 - 2012-04-04 15:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-17 18:01 - 2012-04-04 15:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-17 18:01 - 2011-05-15 15:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-17 17:00 - 2012-11-25 13:57 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-17 17:00 - 2012-11-25 13:57 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-17 16:18 - 2010-05-30 23:02 - 00000000 ___RD C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-17 16:15 - 2010-05-30 23:02 - 00001421 _____ C:\Users\Danny_Master\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 16:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

Some content of TEMP:
====================
C:\Users\Danny_Master\AppData\Local\Temp\drm_dyndata_7290008.dll
C:\Users\Danny_Master\AppData\Local\Temp\nvStInst.exe
C:\Users\Danny_Master\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2011-12-31 18:05

==================== End Of Log ============================

--- --- ---

Ich habe Mozilla Firefox nicht mehr installiert.

MFG
Danny

schrauber · 17.01.2014, 13:05

Installier ihn neu. Noch Probleme?

Danny2014 · 28.01.2014, 19:42

Hallo Schrauber,
sorry erstmal für die späte Antwort von mir. Ich lag gesundheitsbedingt flach. Hab alles wieder installiert, läuft super ohne Probleme. Danke für die Hilfe, die auch zum Erfolg gebracht hat.

MFG
Danny

schrauber · 29.01.2014, 12:08

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

17.01.2014, 13:05	#17
schrauber /// the machine /// TB-Ausbilder	Werbung auf Homepages und unerwünsche Öffnung von Fenster Installier ihn neu. Noch Probleme? __________________ __________________

Werbung auf Homepages und unerwünsche Öffnung von Fenster

Plagegeister aller Art und deren Bekämpfung: Werbung auf Homepages und unerwünsche Öffnung von Fenster