Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Scan mit Spybot & Destroy findet Malware

Scan mit Spybot & Destroy findet Malware


Plagegeister aller Art und deren Bekämpfung: Scan mit Spybot & Destroy findet Malware

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 20.02.2014, 17:46   #1
Heiron
 
Scan mit Spybot & Destroy findet Malware - Standard

Scan mit Spybot & Destroy findet Malware


Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.20.07

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16518
Ronald :: PC-H5 [Administrator]

20.02.2014 17:26:21
mbam-log-2014-02-20 (17-26-21).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 241144
Laufzeit: 2 Minute(n), 11 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Code:
ATTFilter
# AdwCleaner v3.019 - Bericht erstellt am 20/02/2014 um 17:36:36
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Ronald - PC-H5
# Gestartet von : E:\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Ronald\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Ronald\AppData\Local\SwvUpdater
Ordner Gelöscht : C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\FoxTab
Datei Gelöscht : C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\search-the-web.xml
Datei Gelöscht : C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\PIP
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\PIP

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v16.0.2 (de)

[ Datei : C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.brandthunder.websearchplus", false);

-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Ronald\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2258 octets] - [20/02/2014 17:33:28]
AdwCleaner[S0].txt - [1936 octets] - [20/02/2014 17:36:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1996 octets] ##########

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 8.1 x64
Ran by Ronald on 20.02.2014 at 17:40:40,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Ronald\appdata\local\Google\Chrome\User Data\Default\Extensions\cbmmkkbjmcidpennbibfkncodjenfpjh
Successfully deleted: [Folder] C:\Users\Ronald\appdata\local\Google\Chrome\User Data\Default\Extensions\ihdkejbciahopmbagpnjmmkkdpfpaaak



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.02.2014 at 17:41:59,60
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Ronald (administrator) on PC-H5 on 20-02-2014 17:43:27
Running from E:\Downloads\Windows 8\Software
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\WINDOWS\system32\atiesrxx.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM GmbH) D:\FRITZ!Powerline\PowerlineService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(IvoSoft) D:\Classic Shell\ClassicStartMenu.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Safer-Networking Ltd.) D:\Spybot - Search & Destroy 2\SDFSSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe
(AxoNet Software GmbH) C:\Program Files\Windows Home Server\LightsOutClientService.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Safer-Networking Ltd.) D:\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) D:\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET) D:\Google\GO Contact Sync\GOContactSync.exe
(Microsoft Corporation) D:\Microsoft Office\Office12\OUTLOOK.EXE
(NTWind Software) D:\VistaSwitcher\vswitch64.exe
(Google) D:\Google\Google Calendar Sync\GoogleCalendarSync.exe
(Microsoft Corporation) C:\Program Files\Windows Home Server\WHSConnector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [CCEnhancer] - D:\CCEnhancer\CCEnhancer.exe [274944 2013-02-12] (SingularLabs)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [Classic Start Menu] - D:\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2000-01-01] (Realtek Semiconductor)
HKLM-x32\...\Run: [EaseUS EPM tray] - D:\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ControlCenterCount] - D:\MSI\ControlCenter\ControlCenterCount.exe [872448 2012-03-26] (MSI CO.,LTD.)
HKLM-x32\...\Run: [Live Update 5] - D:\MSI\Live Update 5\BootStartLiveupdate.exe [315392 2012-01-30] ()
HKLM-x32\...\Run: [SDTray] - D:\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [StartCCC] - D:\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [GoogleContactSync] - D:\Google\GO Contact Sync\GOContactSync.exe [902144 2012-11-09] (WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET)
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Ronald\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [VistaSwitcher] - D:\VistaSwitcher\vswitch64.exe [233088 2012-05-12] (NTWind Software)
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [Google+ Auto Backup] - C:\Users\Ronald\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [Amazon Cloud Player] - C:\Users\Ronald\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Run: [GoogleChromeAutoLaunch_46D04DEB202FAC32C5D0A661261466F2] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.)
HKU\S-1-5-21-1840703995-4285040453-2833184637-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
Startup: C:\Users\Ronald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ronald\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5CF57E00152BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - D:\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: BrowserHelper Class - {9A065C65-4EE7-4DDD-9918-F129089A894A} - C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - D:\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - D:\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - D:\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Home Server Banner - {D73E76A3-F902-45BD-8FC8-95AE8E014671} - C:\Program Files\Windows Home Server\WHSDeskBands.dll (Microsoft Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - D:\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - D:\Classic Shell\ClassicExplorer32.dll (IvoSoft)
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.22.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - D:\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Ronald\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\amazonde.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\einkaufswelt.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\google-deutschland.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\leo-franzsisch.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\leo-spanisch.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\t-onlinede-portalsuche.xml
FF SearchPlugin: C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\searchplugins\t-onlinede-websuche.xml
FF Extension: Flash Video Downloader - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\artur.dubovoy@gmail.com [2014-01-30]
FF Extension: Default Theme Engine - Personas Interactive - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\btpersonas@brandthunder.com [2013-11-06]
FF Extension: Разпознаване на устройство Logitech - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\DeviceDetection@logitech.com [2012-11-01]
FF Extension: FRITZ!Box AddOn - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\fb_add_on@avm.de [2013-04-26]
FF Extension: Xmarks - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\foxmarks@kei.com [2013-05-25]
FF Extension: Selection Links - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\selectionlinks@floriangilles.com [2012-11-01]
FF Extension: ColorfulTabs - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-02-14]
FF Extension: Flagfox - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-18]
FF Extension: Tab Preview - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{1de0de3c-0b5c-4f67-90c6-689623894991} [2012-11-01]
FF Extension: Google Toolbar for Firefox - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2012-11-01]
FF Extension: Lightshot (screenshot tool) - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2013-05-15]
FF Extension: IE Tab - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2013-05-15]
FF Extension: Nightly Tester Tools - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29} [2013-11-06]
FF Extension: DownloadHelper - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-09-06]
FF Extension: FoxClocks - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2014-01-30]
FF Extension: Arizona Wildcats - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{e458aad0-b532-11db-abbd-0800200c9a66} [2012-11-01]
FF Extension: SearchPreview - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-02-14]
FF Extension: Add to Amazon Wish List Button - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\amznUWL2@amazon.com.xpi [2012-11-01]
FF Extension: CheckPlaces - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\checkplaces@andyhalford.com.xpi [2012-11-01]
FF Extension: Add-on Compatibility Reporter - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\compatibility@addons.mozilla.org.xpi [2013-05-11]
FF Extension: Ciuvo - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\extension@ciuvo.com.xpi [2012-11-01]
FF Extension: Flow - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\Flow@SoapyBrew.xpi [2012-11-01]
FF Extension: gui:config - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\guiconfig@slosd.net.xpi [2012-11-01]
FF Extension: No Name - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\rsdownhelper@yahoo.com.xpi [2012-11-01]
FF Extension: Seven - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\Seven@SoapyHamHocks.xpi [2013-05-15]
FF Extension: Status-4-Evar - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\status4evar@caligonstudios.com.xpi [2013-11-01]
FF Extension: URL Link - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{139a120b-c2ea-41d2-bf70-542d9f063dfd}.xpi [2012-11-01]
FF Extension: FlashGot - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-01-30]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2013-01-15]
FF Extension: eBay Toolbar - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{249df6a2-e336-47d1-b6c3-ec711ad140ca}.xpi [2013-09-14]
FF Extension: ebayitemlistshoweoa - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{31ea9703-204e-4307-8815-e9a3e087b91a}.xpi [2012-11-01]
FF Extension: PDF Download - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.xpi [2012-11-01]
FF Extension: eBay Sidebar for Firefox - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}.xpi [2014-01-18]
FF Extension: Browse Images - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{62b958b4-9962-4fc2-9983-01a9a42d6f2d}.xpi [2012-11-01]
FF Extension: Fasterfox - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2013-09-07]
FF Extension: Adblock Plus - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-18]
FF Extension: Download Statusbar - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2012-11-01]
FF Extension: PopupSound - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{dc0fa140-3db2-73ec-e852-912722c852fa}.xpi [2012-11-01]
FF Extension: Tab Mix Plus - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-02-14]
FF Extension: DownThemAll! - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-05-11]
FF Extension: FoxTab - C:\Users\Ronald\AppData\Roaming\Mozilla\Firefox\Profiles\3gsb05no.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2013-04-12]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF [2013-11-02]
FF StartMenuInternet: FIREFOX.EXE - D:\Mozilla Firefox\firefox.exe

==================== Services (Whitelisted) =================

R2 AVMPowerlineService; D:\FRITZ!Powerline\PowerlineService.exe [126976 2013-11-27] (AVM GmbH)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2000-01-01] (Intel Corporation)
R2 LoClntService; C:\Program Files\Windows Home Server\LightsOutClientService.exe [20128 2013-06-19] (AxoNet Software GmbH)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Samsung UPD Service2; C:\WINDOWS\System32\SUPDSvc2.exe [158208 2012-04-06] (Samsung Electronics)
R2 SDScannerService; D:\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; D:\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; D:\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WHSConnector; C:\Program Files\Windows Home Server\WHSConnector.exe [489840 2011-01-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-09-24] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [17480 2013-03-07] ()
S3 epmntdrv; C:\WINDOWS\SysWOW64\epmntdrv.sys [13896 2013-03-07] ()
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [9800 2013-03-07] ()
S3 EuGdiDrv; C:\WINDOWS\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] ()
S3 GigasetGenericUSB_x64; C:\Windows\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2013-03-05] (Siemens Home and Office Communication Devices GmbH & Co. KG)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20140218.001\IDSvia64.sys [521944 2014-01-24] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2000-01-01] (Intel Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140218.032\ENG64.SYS [126040 2013-11-02] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140218.032\EX64.SYS [2099288 2013-11-02] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 NTIOLib_1_0_4; D:\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_MSISMB_CC; D:\MSI\ControlCenter\Sleep\NTIOLib_X64.sys [13368 2012-11-09] (MSI)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-02-14] ()
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1501000.012\SymELAM.sys [23568 2013-08-01] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-02] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-20 17:41 - 2014-02-20 17:41 - 00000934 _____ () C:\Users\Ronald\Desktop\JRT.txt
2014-02-20 17:36 - 2014-02-20 17:36 - 00002080 ____C () C:\Users\Ronald\Desktop\AdwCleaner[S0].txt
2014-02-20 17:35 - 2014-02-20 17:35 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-20 17:31 - 2014-02-20 17:38 - 00000000 ___DC () C:\AdwCleaner
2014-02-20 17:23 - 2014-02-20 17:23 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\Malwarebytes
2014-02-20 17:23 - 2014-02-20 17:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-20 17:23 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Rockstar Games
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Medion
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\GTA Vice City User Files
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Fax
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Favorites_Q_Dir
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\eRightSoft
2014-02-18 13:57 - 2014-02-01 12:51 - 00000000 ____D () C:\Users\Ronald\Documents\ProcAlyzer Dumps
2014-02-18 13:57 - 2014-02-01 12:51 - 00000000 ____D () C:\Users\Ronald\Documents\mobackups
2014-02-18 13:57 - 2014-02-01 12:51 - 00000000 ____D () C:\Users\Ronald\Documents\Games for Windows - LIVE Demos
2014-02-18 13:57 - 2014-02-01 12:51 - 00000000 ____D () C:\Users\Ronald\Documents\Adobe Scripts
2014-02-18 13:32 - 2014-02-20 17:43 - 00000000 ___DC () C:\FRST
2014-02-16 13:47 - 2014-02-16 13:47 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-02-14 16:44 - 2014-02-14 16:44 - 00000218 _____ () C:\Users\Ronald\.recently-used.xbel
2014-02-14 16:18 - 2014-02-14 16:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-14 16:18 - 2000-01-01 01:00 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2014-02-14 16:18 - 2000-01-01 01:00 - 00099288 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverx64.sys
2014-02-14 16:17 - 2014-02-14 16:17 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-14 16:17 - 2014-02-14 16:17 - 00000000 ____D () C:\Program Files\Realtek
2014-02-14 16:17 - 2000-01-01 01:00 - 03780696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-02-14 16:17 - 2000-01-01 01:00 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 02588376 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 01958616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-02-14 16:17 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 01013504 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00696013 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-02-14 16:17 - 2000-01-01 01:00 - 00628504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBTHX64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00618200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00563992 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBTHX32.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00397592 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00153816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00032344 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\Drivers\MBfilt64.sys
2014-02-14 16:17 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-02-14 16:17 - 2000-01-01 01:00 - 00000176 ____N () C:\WINDOWS\system32\Drivers\RTHDAEQ0.dat
2014-02-14 16:16 - 2014-02-16 13:07 - 00001170 _____ () C:\WINDOWS\setupact.log
2014-02-14 16:16 - 2014-02-14 16:16 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-02-14 14:41 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-14 14:41 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-14 14:41 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-14 14:41 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-14 14:41 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-14 14:41 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-14 14:41 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-14 14:41 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-14 14:41 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-14 14:41 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-14 14:41 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-14 14:41 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-14 14:41 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-14 14:41 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-14 14:41 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-14 14:41 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-14 14:41 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-14 14:41 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-14 14:41 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-14 14:41 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-14 14:41 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-14 14:41 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-14 14:41 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-14 14:41 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-14 14:41 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-14 14:41 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-14 14:41 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-14 14:41 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-14 14:41 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-14 14:41 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-14 14:41 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-14 14:41 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-14 14:41 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-14 14:41 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-14 14:41 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-14 14:41 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-14 14:41 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-14 14:41 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-14 14:41 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-14 14:41 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-14 14:41 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-14 14:41 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-14 14:41 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-14 14:41 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-14 14:41 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-14 14:40 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-02-14 14:40 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-02-14 14:40 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-02-14 14:40 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-02-14 14:40 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-02-14 14:40 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-02-14 14:40 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-02-14 14:40 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-02-14 14:40 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-02-14 14:40 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-02-14 14:40 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-02-14 14:40 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-02-14 14:40 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-02-14 14:40 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-02-14 14:40 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-02-14 14:40 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-02-14 14:40 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-02-14 14:40 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-02-14 14:40 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-02-14 14:40 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-02-14 14:40 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-02-14 14:40 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-02-14 14:40 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-02-14 14:40 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-02-14 14:40 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-14 14:40 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-08 17:11 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Designer Files
2014-02-08 16:26 - 2014-02-14 16:19 - 00007810 _____ () C:\WINDOWS\PFRO.log
2014-02-08 12:49 - 2014-01-30 21:47 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-02-08 12:49 - 2014-01-30 21:47 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-08 12:36 - 2014-02-20 17:40 - 00000000 __RDO () C:\Users\Ronald\Documents\SkyDrive
2014-02-01 15:49 - 2014-02-01 15:49 - 00000000 ____D () C:\Program Files\Media Preview
2014-02-01 15:49 - 2014-02-01 15:49 - 00000000 ____D () C:\Program Files (x86)\Media Preview
2014-01-30 13:28 - 2014-01-30 13:28 - 00032796 _____ () C:\Users\Ronald\Desktop\cc_20140130_132841.reg
2014-01-25 17:11 - 2014-01-25 17:12 - 00000000 ____D () C:\ProgramData\Nalpeiron
2014-01-25 17:11 - 2014-01-25 17:11 - 00000000 ____D () C:\Users\Default.migrated\AppData\Roaming\onOne Software
2014-01-25 17:11 - 2014-01-25 17:11 - 00000000 ____D () C:\Users\Default.migrated\AppData\Roaming\Adobe
2014-01-25 17:10 - 2014-01-25 17:12 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\onOne Software
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\ProgramData\onOne Software
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\Program Files\onOne Software
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\Program Files (x86)\onOne Software
2014-01-25 16:16 - 2013-08-22 07:57 - 00002440 ___RS () C:\Users\Ronald\AppData\Roaming\Microsoft\Windows\Start Menu\FileManager.lnk
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\Program Files\iTunes
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\Program Files\iPod
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudbus.sys

==================== One Month Modified Files and Folders =======

2014-02-20 17:43 - 2014-02-18 13:32 - 00000000 ___DC () C:\FRST
2014-02-20 17:41 - 2014-02-20 17:41 - 00000934 _____ () C:\Users\Ronald\Desktop\JRT.txt
2014-02-20 17:40 - 2014-02-08 12:36 - 00000000 __RDO () C:\Users\Ronald\Documents\SkyDrive
2014-02-20 17:40 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-20 17:40 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-20 17:40 - 2012-11-01 10:17 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-20 17:38 - 2014-02-20 17:31 - 00000000 ___DC () C:\AdwCleaner
2014-02-20 17:36 - 2014-02-20 17:36 - 00002080 ____C () C:\Users\Ronald\Desktop\AdwCleaner[S0].txt
2014-02-20 17:35 - 2014-02-20 17:35 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-20 17:32 - 2014-01-03 13:54 - 01395805 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-20 17:24 - 2013-09-30 05:14 - 01785582 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-20 17:24 - 2013-09-30 04:56 - 00767850 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-20 17:24 - 2013-09-30 04:56 - 00160170 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-20 17:23 - 2014-02-20 17:23 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\Malwarebytes
2014-02-20 17:23 - 2014-02-20 17:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-20 17:23 - 2012-11-01 10:16 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1840703995-4285040453-2833184637-1001
2014-02-20 17:21 - 2013-10-26 08:35 - 00003922 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D0594354-AB3D-4B06-BF25-A1B68825CE62}
2014-02-20 17:19 - 2012-11-24 09:10 - 00000000 ____D () C:\ProgramData\LightsOut
2014-02-19 15:15 - 2013-10-25 11:07 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\ClassicShell
2014-02-19 15:09 - 2012-11-01 10:17 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-19 15:07 - 2013-05-20 12:24 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-19 15:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-19 14:08 - 2012-11-01 12:26 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\XnView
2014-02-19 13:50 - 2012-11-01 13:22 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\Mp3tag
2014-02-19 13:26 - 2013-02-03 09:00 - 01336832 ___SH () C:\Users\Ronald\Desktop\Thumbs.db
2014-02-18 14:13 - 2013-09-20 15:09 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\vlc
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Rockstar Games
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Medion
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\GTA Vice City User Files
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Fax
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Favorites_Q_Dir
2014-02-18 13:57 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\eRightSoft
2014-02-18 13:57 - 2014-02-08 17:11 - 00000000 ____D () C:\Users\Ronald\Documents\Designer Files
2014-02-18 12:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-16 14:33 - 2013-07-21 08:03 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-16 14:32 - 2012-12-16 11:50 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-16 13:47 - 2014-02-16 13:47 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-02-16 13:07 - 2014-02-14 16:16 - 00001170 _____ () C:\WINDOWS\setupact.log
2014-02-16 12:52 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-14 16:44 - 2014-02-14 16:44 - 00000218 _____ () C:\Users\Ronald\.recently-used.xbel
2014-02-14 16:44 - 2013-10-25 12:02 - 00000000 ____D () C:\Users\Ronald
2014-02-14 16:19 - 2014-02-08 16:26 - 00007810 _____ () C:\WINDOWS\PFRO.log
2014-02-14 16:18 - 2014-02-14 16:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-14 16:18 - 2013-11-06 16:51 - 00016152 _____ () C:\WINDOWS\system32\Drivers\SWDUMon.sys
2014-02-14 16:17 - 2014-02-14 16:17 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-14 16:17 - 2014-02-14 16:17 - 00000000 ____D () C:\Program Files\Realtek
2014-02-14 16:16 - 2014-02-14 16:16 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-02-14 15:57 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-14 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-02-14 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-02-14 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-02-09 16:51 - 2012-11-01 11:18 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\Dropbox
2014-02-09 16:51 - 2012-11-01 10:09 - 00000000 ___RD () C:\Users\Ronald\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-08 17:15 - 2013-08-23 15:44 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\XnViewMP
2014-02-08 16:25 - 2013-11-06 16:56 - 00000478 _____ () C:\WINDOWS\Tasks\SlimDrivers Scan.job
2014-02-08 13:07 - 2013-05-20 12:24 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-06 13:16 - 2014-02-14 14:41 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 14:41 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 14:41 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 14:41 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 14:41 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 14:41 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 14:41 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 14:41 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-14 14:41 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 14:41 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 14:41 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 14:41 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 14:41 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 14:41 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 14:41 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 14:41 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 14:41 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 14:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 14:41 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 14:41 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 14:41 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 14:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 14:41 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-14 14:41 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 14:41 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 14:41 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 14:41 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 14:41 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 14:41 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 14:41 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 14:41 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 14:41 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 14:41 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 14:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 14:41 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 14:41 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 14:41 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-01 15:49 - 2014-02-01 15:49 - 00000000 ____D () C:\Program Files\Media Preview
2014-02-01 15:49 - 2014-02-01 15:49 - 00000000 ____D () C:\Program Files (x86)\Media Preview
2014-02-01 15:43 - 2012-11-17 12:15 - 00000000 ____D () C:\ProgramData\POIbase
2014-02-01 14:03 - 2013-10-25 11:03 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-02-01 12:51 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\ProcAlyzer Dumps
2014-02-01 12:51 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\mobackups
2014-02-01 12:51 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Games for Windows - LIVE Demos
2014-02-01 12:51 - 2014-02-18 13:57 - 00000000 ____D () C:\Users\Ronald\Documents\Adobe Scripts
2014-01-30 21:47 - 2014-02-08 12:49 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2014-02-08 12:49 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 13:28 - 2014-01-30 13:28 - 00032796 _____ () C:\Users\Ronald\Desktop\cc_20140130_132841.reg
2014-01-26 16:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-26 13:53 - 2014-01-18 11:21 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\dvdcss
2014-01-25 17:12 - 2014-01-25 17:11 - 00000000 ____D () C:\ProgramData\Nalpeiron
2014-01-25 17:12 - 2014-01-25 17:10 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\onOne Software
2014-01-25 17:11 - 2014-01-25 17:11 - 00000000 ____D () C:\Users\Default.migrated\AppData\Roaming\onOne Software
2014-01-25 17:11 - 2014-01-25 17:11 - 00000000 ____D () C:\Users\Default.migrated\AppData\Roaming\Adobe
2014-01-25 17:11 - 2012-11-01 10:09 - 00000000 ____D () C:\Users\Ronald\AppData\Roaming\Adobe
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\ProgramData\onOne Software
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\Program Files\onOne Software
2014-01-25 17:10 - 2014-01-25 17:10 - 00000000 ____D () C:\Program Files (x86)\onOne Software
2014-01-25 17:10 - 2012-11-01 11:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\Program Files\iTunes
2014-01-24 15:30 - 2014-01-24 15:30 - 00000000 ____D () C:\Program Files\iPod
2014-01-24 15:29 - 2012-11-17 10:08 - 00000000 ____D () C:\ProgramData\Apple
2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudbus.sys

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-18 12:09

==================== End Of Log ============================
--- --- ---



Danke
__________________
Gruß ...und Tschüss
Heiron
...es gibt Schlechtere

Antwort

Themen zu Scan mit Spybot & Destroy findet Malware
abelssoft, bonjour, branding, converter, cpu-z, desktop, ebay, email, error, excel, failed, flash player, google, home, installation, launch, malware, mozilla, msiinstaller, programm, prozess, realtek, refresh, registry, rundll, scan, security, software, svchost.exe, symantec, system, vice city, windowsapps


« PUP.Optional.DomalQ / PUP.Optional.BProtector / PUP.Optional.InstallMonetizer.A | Windows Vista: ewiges booten, email-browser hängt sich auf und vieles mehr »


Ähnliche Themen: Scan mit Spybot & Destroy findet Malware


  1. Malwarebytes Anti-Malware Scan findet zwei Viren
    Log-Analyse und Auswertung - 07.12.2013 (25)
  2. Windows7, Spybot findet multiple Malware
    Log-Analyse und Auswertung - 16.10.2013 (18)
  3. Spybot-Search & Destroy hat ein Trojaner gefunden
    Plagegeister aller Art und deren Bekämpfung - 11.06.2012 (4)
  4. Spybot Search & Destroy Echtzeitschutz?
    Antiviren-, Firewall- und andere Schutzprogramme - 18.10.2009 (5)
  5. Spybot Searcch&Destroy
    Plagegeister aller Art und deren Bekämpfung - 12.08.2009 (9)
  6. Spybot Search & Destroy meldet Virtumonde.dll
    Plagegeister aller Art und deren Bekämpfung - 28.07.2009 (15)
  7. Spybot Search & Destroy
    Anleitungen, FAQs & Links - 29.10.2008 (2)
  8. Meldung von Spybot - Search & Destroy
    Plagegeister aller Art und deren Bekämpfung - 09.11.2007 (3)
  9. Spybot Search & Destroy + Antivir
    Antiviren-, Firewall- und andere Schutzprogramme - 10.10.2007 (5)
  10. Spybot-Search and Destroy-Fehler
    Antiviren-, Firewall- und andere Schutzprogramme - 27.08.2007 (1)
  11. Logfile von Spybot - Search & Destroy
    Log-Analyse und Auswertung - 17.02.2006 (4)
  12. Spybot - Search & Destroy
    Plagegeister aller Art und deren Bekämpfung - 03.06.2005 (6)
  13. Spybot Search & Destroy 1.4
    Antiviren-, Firewall- und andere Schutzprogramme - 01.06.2005 (5)
  14. Spybot Search & Destroy
    Plagegeister aller Art und deren Bekämpfung - 11.11.2004 (3)
  15. SpyBot Search & Destroy V1.3.1 TX
    Antiviren-, Firewall- und andere Schutzprogramme - 04.11.2004 (14)
  16. SpyBot Search & Destroy V1.3.1 TX II
    Antiviren-, Firewall- und andere Schutzprogramme - 29.10.2004 (2)
  17. Spybot - search and destroy
    Antiviren-, Firewall- und andere Schutzprogramme - 20.08.2004 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Scan mit Spybot & Destroy findet Malware - Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.20.07 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16518 Ronald :: PC-H5 [Administrator] 20.02.2014 17:26:21 mbam-log-2014-02-20 (17-26-21).txt Art des Suchlaufs: - Scan mit Spybot & Destroy findet Malware...
Archiv
Du betrachtest: Scan mit Spybot & Destroy findet Malware auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131