Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Virus blockiert Diverse VirenScanner

Virus blockiert Diverse VirenScanner


Plagegeister aller Art und deren Bekämpfung: Virus blockiert Diverse VirenScanner

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 2 1 2
Alt 11.03.2014, 14:36   #16
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


So Voila

FRST LogFile

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014
Ran by X (administrator) on PHANT0M on 11-03-2014 13:50:17
Running from C:\Users\X\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Spotify Ltd) C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
(Blizzard Entertainment) D:\Games\Battle.net\Battle.net.4269\Battle.net.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Spotify Ltd) C:\Users\X\AppData\Roaming\Spotify\spotify.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
() D:\Games\LOL TURKEY\RADS\system\rads_user_kernel.exe
() D:\Games\LOL TURKEY\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() C:\Users\X\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corp.) C:\Windows\system32\Defrag.exe
() D:\Games\LOL TURKEY\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] - C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKU\.DEFAULT\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [1305408 2011-01-20] (DT Soft Ltd)
HKU\.DEFAULT\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\.DEFAULT\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [RocketDock] - C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [Spotify Web Helper] - C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-02-16] (Spotify Ltd)
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
Startup: C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\X\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x008CD126D995CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default
FF NewTab: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Adblock Plus - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-02]

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "hxxp://google.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-10]
CHR Extension: (Google Drive) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-10]
CHR Extension: (YouTube) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-10]
CHR Extension: (Google-Suche) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-10]
CHR Extension: (avast! Online Security) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-08-10]
CHR Extension: (Arcane Legends) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmlkgieigeddcedpbijnpojheoddido [2013-08-10]
CHR Extension: (Chrome In-App Payments service) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (ScriptSafe) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-08-10]
CHR Extension: (Google Mail) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-10]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S4 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [1863680 2012-07-06] (Ralink)
S4 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2013-08-09] (DT Soft Ltd)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-03-01] ()
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U4 SR; 
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-11 13:50 - 2014-03-11 13:51 - 00011904 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-11 13:48 - 2014-03-11 13:48 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-11 13:31 - 2014-03-11 13:31 - 00987442 _____ () C:\Users\X\Desktop\SecurityCheck.exe
2014-03-11 13:11 - 2014-03-11 13:11 - 02347384 _____ (ESET) C:\Users\X\Desktop\esetsmartinstaller_enu.exe
2014-03-11 13:11 - 2014-03-11 13:11 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-06 21:30 - 2014-03-11 13:50 - 00000000 ____D () C:\FRST
2014-03-06 21:22 - 2014-03-06 21:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-06 21:14 - 2014-03-06 21:16 - 00000000 ____D () C:\AdwCleaner
2014-03-04 23:11 - 2014-03-07 03:47 - 00000133 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:09 - 2014-03-01 00:33 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-03-02 02:40 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-02-27 18:20 - 2014-02-27 18:20 - 00000998 _____ () C:\Users\X\Desktop\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 07:47 - 2014-03-01 01:54 - 00003378 _____ () C:\Windows\PFRO.log
2014-02-21 15:42 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-21 15:42 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-21 15:42 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-21 15:42 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-21 15:42 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-21 15:42 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-21 15:42 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-21 15:42 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-21 15:41 - 2014-02-22 07:52 - 00000000 ___HD () C:\Qoobox
2014-02-21 15:41 - 2014-02-22 07:51 - 00000000 ____D () C:\Windows\erdnt
2014-02-21 07:43 - 2014-03-10 20:44 - 00001176 _____ () C:\Windows\setupact.log
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-17 22:32 - 2014-02-17 22:32 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-02-16 18:01 - 2014-02-16 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 00:41 - 2014-02-13 01:14 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

==================== One Month Modified Files and Folders =======

2014-03-11 13:51 - 2014-03-11 13:50 - 00011904 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-11 13:51 - 2013-12-07 14:30 - 00000000 ____D () C:\Users\X\AppData\Local\Battle.net
2014-03-11 13:50 - 2014-03-06 21:30 - 00000000 ____D () C:\FRST
2014-03-11 13:48 - 2014-03-11 13:48 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-11 13:42 - 2014-01-27 21:56 - 00000000 ____D () C:\Users\X\AppData\Roaming\Spotify
2014-03-11 13:31 - 2014-03-11 13:31 - 00987442 _____ () C:\Users\X\Desktop\SecurityCheck.exe
2014-03-11 13:26 - 2013-10-24 18:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 13:15 - 2013-08-10 15:52 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-11 13:11 - 2014-03-11 13:11 - 02347384 _____ (ESET) C:\Users\X\Desktop\esetsmartinstaller_enu.exe
2014-03-11 13:11 - 2014-03-11 13:11 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-11 04:59 - 2013-08-09 19:06 - 01268190 _____ () C:\Windows\WindowsUpdate.log
2014-03-10 21:25 - 2014-02-08 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-10 20:51 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-10 20:51 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-10 20:44 - 2014-02-21 07:43 - 00001176 _____ () C:\Windows\setupact.log
2014-03-10 20:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-10 15:41 - 2014-01-27 21:58 - 00000000 ____D () C:\Users\X\AppData\Local\Spotify
2014-03-10 01:08 - 2013-08-10 20:27 - 00000000 ____D () C:\Users\X\AppData\Roaming\TS3Client
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-07 03:47 - 2014-03-04 23:11 - 00000133 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-06 21:22 - 2014-03-06 21:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-06 21:16 - 2014-03-06 21:14 - 00000000 ____D () C:\AdwCleaner
2014-03-04 23:11 - 2013-08-09 21:26 - 00000000 ____D () C:\Users\X
2014-03-04 12:43 - 2010-11-21 07:50 - 00702964 _____ () C:\Windows\system32\perfh007.dat
2014-03-04 12:43 - 2010-11-21 07:50 - 00127494 _____ () C:\Windows\system32\perfc007.dat
2014-03-04 12:43 - 2009-07-14 06:13 - 01593840 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-02 02:40 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 01:54 - 2014-02-22 07:47 - 00003378 _____ () C:\Windows\PFRO.log
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:33 - 2014-03-01 00:09 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-02-27 18:20 - 00000998 _____ () C:\Users\X\Desktop\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:20 - 2013-08-09 21:26 - 00000000 ___RD () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 08:04 - 2013-08-09 19:11 - 00000000 ____D () C:\Program Files (x86)\RocketDock
2014-02-22 07:52 - 2014-02-21 15:41 - 00000000 ___HD () C:\Qoobox
2014-02-22 07:51 - 2014-02-21 15:41 - 00000000 ____D () C:\Windows\erdnt
2014-02-22 07:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-21 08:26 - 2013-10-24 18:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 08:26 - 2013-09-02 19:23 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 08:26 - 2013-09-02 19:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 16:35 - 2013-08-16 22:48 - 00000000 ____D () C:\Windows\Minidump
2014-02-20 16:34 - 2013-12-04 15:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-17 22:32 - 2014-02-17 22:32 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-02-17 21:22 - 2013-09-02 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 19:14 - 2014-01-27 21:58 - 00001784 _____ () C:\Users\X\Desktop\Spotify.lnk
2014-02-16 19:14 - 2014-01-27 21:58 - 00001770 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-02-16 18:01 - 2014-02-16 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 01:14 - 2014-02-13 00:41 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

Some content of TEMP:
====================
C:\Users\X\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 21:13

==================== End Of Log ============================
--- --- ---

--- --- ---


SecurityCheck LogFile

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Wise Registry Cleaner 7.94  
 Java(TM) 6 Update 24  
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Flash Player 12.0.0.70  
 Adobe Reader XI  
 Mozilla Firefox (27.0.1) 
 Google Chrome 33.0.1750.117  
 Google Chrome 33.0.1750.146  
````````Process Check: objlist.exe by Laurent````````  
 ESET ESET Online Scanner OnlineScannerApp.exe  
 ESET ESET Online Scanner OnlineCmdLineScanner.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
EsetOlineScanner Log
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=570a9870de89d74c86514da48dd225b7
# engine=17397
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-11 01:30:34
# local_time=2014-03-11 02:30:34 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=771 16777214 16 1 16334334 16334334 0 0
# compatibility_mode=5893 16776574 100 94 18382891 146174484 0 0
# scanned=219184
# found=0
# cleaned=0
# scan_time=4449

Alt 12.03.2014, 11:58   #17
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Java updaten.

Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________

__________________
Alt 12.03.2014, 20:46   #18
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner




leider besteht das Problem noch Updates durchgeführt etc. und dennoch keine Wirkung
__________________
Alt 13.03.2014, 13:16   #19
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Kommt davon wenn man meine Fragen ignoriert

Was genau ist noch an Problemen da?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 13.03.2014, 13:24   #20
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Ich ignoriere deine Fragen doch garnicht . Mag sein dass ich was übersehen hab falls ja tut mir leid. Hab ja alle logfiles die du bisher wolltest gepostet ^^ siehe unten gleiches problem besteht noch. Hab Malwarebytes deinstalliert rechner neu gestartet mbam cleaner laufen lassen nochmal neustart und danach Malwarebytes installiert und während der installation dasselbe fehler

Angehängte Grafiken
Dateityp: jpg post-156516-0-56546600-1392322938.jpg (136,9 KB, 132x aufgerufen)

Alt 14.03.2014, 10:31   #21
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Also das einzige Problem was besteht ist das mit MBAM? Sonst keine Probleme mehr?

Das hat nix mit Malware oder so zu tun.

Öffne bitte mal FRST, setz nen Haken bei Additional und scanne. Poste beide Logs.

Wenn ich da nix finde musste zum MBAM Support wegen dem Problem.
__________________
--> Virus blockiert Diverse VirenScanner

Alt 14.03.2014, 19:44   #22
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Ne war bei 2-3 weitern programmen so von denen ich die namen nicht mehr da hab wo ich versucht habe den virus zu bekämpfen dachte ich mir lad ähnliche programme wie Malwarebytes runter aber bei 2-3 wie gesagt selbe fehler.


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by X (administrator) on PHANT0M on 14-03-2014 19:42:09
Running from C:\Users\X\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Spotify Ltd) C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() D:\Games\League of Legends\RADS\system\rads_user_kernel.exe
() D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() D:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] - C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKU\.DEFAULT\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\.DEFAULT\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\.DEFAULT\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [RocketDock] - C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [Spotify Web Helper] - C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-02-16] (Spotify Ltd)
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-06] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-03-06] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Bing
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x008CD126D995CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&q={searchTerms}&SSPV=SE1HB2_sp_ie
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default
FF user.js: detected! => C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\user.js
FF NewTab: about:home
FF DefaultSearchEngine: Conduit Search
FF SelectedSearchEngine: Conduit Search
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Adblock Plus - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-02]

Chrome: 
=======
CHR HomePage: hxxp://www.trovigo.com/?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&SSPV=SE1HB2_sp_ch
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&q={searchTerms}&SSPV=SE1HB2_sp_ch
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\pdf.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-10]
CHR Extension: (Google Drive) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-10]
CHR Extension: (YouTube) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-10]
CHR Extension: (Google-Suche) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-10]
CHR Extension: (avast! Online Security) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-08-10]
CHR Extension: (Arcane Legends) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmlkgieigeddcedpbijnpojheoddido [2013-08-10]
CHR Extension: (Amazon-Icon) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2014-03-12]
CHR Extension: (Google Wallet) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (ScriptSafe) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-08-10]
CHR Extension: (Google Mail) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-10]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\X\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-03-11]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S4 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2454816 2014-03-06] (Conduit)
S4 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [1863680 2012-07-06] (Ralink)
S4 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [X]
S3 Secunia PSI Agent; "C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service [X]
S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-03-01] ()
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U4 SR; 
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-14 19:42 - 2014-03-14 19:42 - 00013810 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-14 19:41 - 2014-03-14 19:42 - 00000000 ____D () C:\FRST
2014-03-14 19:41 - 2014-03-14 19:41 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-12 20:44 - 2014-03-12 20:44 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-03-12 19:13 - 2014-03-12 19:14 - 00001603 _____ () C:\DelFix.txt
2014-03-12 18:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-03-12 18:19 - 2014-03-12 18:19 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-12 18:17 - 2014-03-12 18:17 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-12 18:17 - 2014-03-12 18:17 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-12 18:16 - 2014-03-12 18:23 - 00010332 _____ () C:\Windows\IE11_main.log
2014-03-12 18:07 - 2014-03-12 18:12 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-12 17:51 - 2014-03-12 18:07 - 00443528 _____ () C:\Windows\msxml4-KB973688-deu.LOG
2014-03-12 17:39 - 2014-03-12 17:39 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-03-12 17:31 - 2014-03-12 17:31 - 00000000 ____D () C:\Users\X\AppData\Local\Secunia PSI
2014-03-12 17:25 - 2014-03-12 17:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 17:21 - 2014-03-12 17:21 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-03-12 17:21 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-12 17:21 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-12 17:21 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-12 17:21 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-12 17:16 - 2014-03-12 17:16 - 00000000 ____D () C:\Program Files\Java
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Users\X\AppData\Local\SearchProtect
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-03-12 12:04 - 2014-03-12 12:04 - 00000000 ____D () C:\Users\X\Documents\Ghost Games
2014-03-12 11:35 - 2014-03-12 12:04 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-11 23:08 - 2014-03-12 00:15 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-11 22:17 - 2014-03-11 22:17 - 00000000 ____D () C:\Users\X\AppData\Local\Temp188160de6693b97a1c1c68dca79180cd
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\ChromeExtensions
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\AppData\Local\Tempca358999e0cd7f115b52f50d5cf58b42
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-06 21:22 - 2014-03-12 19:13 - 00000000 ____D () C:\Windows\ERUNT
2014-03-04 23:11 - 2014-03-14 02:08 - 00000093 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:09 - 2014-03-01 00:33 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-03-02 02:40 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 07:47 - 2014-03-12 19:29 - 00044288 _____ () C:\Windows\PFRO.log
2014-02-21 15:41 - 2014-02-22 07:51 - 00000000 ____D () C:\Windows\erdnt
2014-02-21 07:43 - 2014-03-14 15:14 - 00001400 _____ () C:\Windows\setupact.log
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-16 18:01 - 2014-03-12 17:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 00:41 - 2014-02-13 01:14 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

==================== One Month Modified Files and Folders =======

2014-03-14 19:42 - 2014-03-14 19:42 - 00013810 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-14 19:42 - 2014-03-14 19:41 - 00000000 ____D () C:\FRST
2014-03-14 19:41 - 2014-03-14 19:41 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-14 19:26 - 2013-10-24 18:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 19:15 - 2013-08-10 15:52 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-14 18:52 - 2014-02-08 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-14 15:22 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-14 15:22 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-14 15:18 - 2013-08-09 19:06 - 01453296 _____ () C:\Windows\WindowsUpdate.log
2014-03-14 15:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-14 15:14 - 2014-02-21 07:43 - 00001400 _____ () C:\Windows\setupact.log
2014-03-14 03:37 - 2013-12-07 14:30 - 00000000 ____D () C:\Users\X\AppData\Local\Battle.net
2014-03-14 03:37 - 2013-08-10 20:27 - 00000000 ____D () C:\Users\X\AppData\Roaming\TS3Client
2014-03-14 02:52 - 2014-01-27 21:56 - 00000000 ____D () C:\Users\X\AppData\Roaming\Spotify
2014-03-14 02:08 - 2014-03-04 23:11 - 00000093 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-12 20:44 - 2014-03-12 20:44 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-03-12 20:43 - 2013-08-09 21:26 - 00001425 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-12 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-12 19:33 - 2010-11-21 07:50 - 00702964 _____ () C:\Windows\system32\perfh007.dat
2014-03-12 19:33 - 2010-11-21 07:50 - 00136524 _____ () C:\Windows\system32\perfc007.dat
2014-03-12 19:33 - 2009-07-14 06:13 - 01603106 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-12 19:29 - 2014-02-22 07:47 - 00044288 _____ () C:\Windows\PFRO.log
2014-03-12 19:29 - 2013-08-09 20:01 - 00000000 ____D () C:\Windows\Panther
2014-03-12 19:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-12 19:21 - 2014-01-02 13:53 - 00000000 ____D () C:\Windows\pss
2014-03-12 19:21 - 2013-08-09 21:26 - 00000000 ___RD () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-12 19:14 - 2014-03-12 19:13 - 00001603 _____ () C:\DelFix.txt
2014-03-12 19:13 - 2014-03-06 21:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-12 18:23 - 2014-03-12 18:16 - 00010332 _____ () C:\Windows\IE11_main.log
2014-03-12 18:19 - 2014-03-12 18:19 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-12 18:17 - 2014-03-12 18:17 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-12 18:17 - 2014-03-12 18:17 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-12 18:12 - 2014-03-12 18:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-12 18:07 - 2014-03-12 17:51 - 00443528 _____ () C:\Windows\msxml4-KB973688-deu.LOG
2014-03-12 18:05 - 2013-08-09 21:19 - 01576450 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-12 17:45 - 2013-09-02 19:22 - 00000000 ____D () C:\Users\X\AppData\Local\Adobe
2014-03-12 17:39 - 2014-03-12 17:39 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-03-12 17:31 - 2014-03-12 17:31 - 00000000 ____D () C:\Users\X\AppData\Local\Secunia PSI
2014-03-12 17:27 - 2014-02-16 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-12 17:27 - 2013-08-09 21:22 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-12 17:25 - 2014-03-12 17:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 17:21 - 2014-03-12 17:21 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-03-12 17:16 - 2014-03-12 17:17 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-12 17:16 - 2014-03-12 17:17 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-12 17:16 - 2014-03-12 17:17 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-12 17:16 - 2014-03-12 17:16 - 00000000 ____D () C:\Program Files\Java
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Users\X\AppData\Local\SearchProtect
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-03-12 12:04 - 2014-03-12 12:04 - 00000000 ____D () C:\Users\X\Documents\Ghost Games
2014-03-12 12:04 - 2014-03-12 11:35 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-12 00:15 - 2014-03-11 23:08 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-11 22:33 - 2013-10-24 18:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 22:33 - 2013-09-02 19:23 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 22:33 - 2013-09-02 19:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 22:17 - 2014-03-11 22:17 - 00000000 ____D () C:\Users\X\AppData\Local\Temp188160de6693b97a1c1c68dca79180cd
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\ChromeExtensions
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\AppData\Local\Tempca358999e0cd7f115b52f50d5cf58b42
2014-03-11 22:09 - 2013-08-09 21:26 - 00000000 ____D () C:\Users\X
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-10 15:41 - 2014-01-27 21:58 - 00000000 ____D () C:\Users\X\AppData\Local\Spotify
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-02 02:40 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:33 - 2014-03-01 00:09 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 08:04 - 2013-08-09 19:11 - 00000000 ____D () C:\Program Files (x86)\RocketDock
2014-02-22 07:51 - 2014-02-21 15:41 - 00000000 ____D () C:\Windows\erdnt
2014-02-22 07:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 16:35 - 2013-08-16 22:48 - 00000000 ____D () C:\Windows\Minidump
2014-02-20 16:34 - 2013-12-04 15:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-17 21:22 - 2013-09-02 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 19:14 - 2014-01-27 21:58 - 00001784 _____ () C:\Users\X\Desktop\Spotify.lnk
2014-02-16 19:14 - 2014-01-27 21:58 - 00001770 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-02-13 01:14 - 2014-02-13 00:41 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 21:13

==================== End Of Log ============================
--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by X at 2014-03-14 19:42:41
Running from C:\Users\X\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.149 - Google Inc.)
K-Lite Codec Pack (64-bit) v4.5.0 (HKLM\...\KLiteCodecPack64_is1) (Version: 4.5.0 - )
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

==================== Restore Points  =========================

12-03-2014 18:13:59 Ende der Bereinigung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-02-22 07:48 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03B8D0BD-2435-4308-8714-1ECEB9B736CC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {16A0C00C-8F9A-42C9-9902-BE42809843BB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {58832227-D83B-438B-807F-5952C5AD4125} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-10] (Google Inc.)
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {C12C6665-7821-4E3B-802F-8A2B1F816A03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-10] (Google Inc.)
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 16:06 - 2013-12-06 16:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2013-08-09 19:11 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2013-12-06 16:06 - 2013-12-06 16:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-25 16:48 - 2013-11-21 20:21 - 01294336 _____ () D:\Games\League of Legends\RADS\system\rads_user_kernel.exe
2014-01-25 16:48 - 2014-03-07 23:21 - 05325152 _____ () D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
2014-01-25 16:48 - 2014-01-17 23:02 - 00074752 _____ () D:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe
2013-08-09 19:11 - 2007-09-02 12:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2013-09-01 22:06 - 2009-10-31 06:13 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Pyra Mouse\hiddriver.dll
2014-02-16 18:01 - 2014-02-16 18:01 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-25 16:48 - 2014-03-07 23:21 - 00265056 _____ () D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\RiotLauncher.dll
2014-03-11 22:33 - 2014-03-11 22:33 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: BackupStack => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: RalinkRegistryWriter => 2
MSCONFIG\Services: RalinkRegistryWriter64 => 2
MSCONFIG\Services: RaMediaServer => 2
MSCONFIG\Services: RzKLService => 2
MSCONFIG\Services: SplashtopRemoteService => 2
MSCONFIG\Services: SSUService => 2
MSCONFIG\Services: Update outobox => 2
MSCONFIG\startupfolder: C:^Users^X^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Spotify => "C:\Users\X\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/14/2014 03:16:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 11:51:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:44:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.75.0.1, Zeitstempel: 0x511f8eb2
Name des fehlerhaften Moduls: OLEAUT32.dll, Version: 6.1.7601.17676, Zeitstempel: 0x4e58702a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001604c
ID des fehlerhaften Prozesses: 0x9c4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (03/12/2014 07:30:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:13:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9016, Zeitstempel: 0x52a1d50f
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db9710
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000332b0
ID des fehlerhaften Prozesses: 0x10b8
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (03/12/2014 06:04:17 PM) (Source: MsiInstaller) (User: PHANT0M)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Host application" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Monitoring program" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Host application" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Monitoring program" konnte nicht heruntergefahren werden.


System errors:
=============
Error: (03/14/2014 03:15:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/13/2014 11:49:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/12/2014 07:29:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/12/2014 05:28:57 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (03/14/2014 03:16:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 11:51:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:44:41 PM) (Source: Application Error)(User: )
Description: mbam.exe1.75.0.1511f8eb2OLEAUT32.dll6.1.7601.176764e58702ac00000050001604c9c401cf3e2b7ec836c0C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeC:\Windows\syswow64\OLEAUT32.dllc0918570-aa1e-11e3-a79d-f16c2ec03e24

Error: (03/12/2014 07:30:33 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:13:36 PM) (Source: Application Error)(User: )
Description: PSIA.exe3.0.0.901652a1d50fntdll.dll6.1.7601.1820551db9710c0000005000332b010b801cf3e1078d98d60C:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\Windows\SysWOW64\ntdll.dll073c0ca0-aa12-11e3-b9ba-a76100c33f29

Error: (03/12/2014 06:04:17 PM) (Source: MsiInstaller)(User: PHANT0M)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeCatalyst Control Center: Host application021173800763003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C006E006C00730073006F007200740069006E0067002E0064006C006C00000063003A005C00770069006E0064006F00770073005C00730079007300740065006D00330032005C006D0073007600630072003100310030005F0063006C00720030003400300030002E0064006C006C00000063003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C007700700066005C00700072006500730065006E0074006100740069006F006E006E00610074006900760065005F00760030003400300030002E0064006C006C00000063003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C00640069006100730079006D007200650061006400650072002E0064006C006C00000063003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C007700700066005C007700700066006700660078005F00760030003400300030002E0064006C006C00000063003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C0063006C0072006A00690074002E0064006C006C00000063003A005C00770069006E0064006F00770073005C006D006900630072006F0073006F00660074002E006E00650074005C006600720061006D00650077006F0072006B00360034005C00760034002E0030002E00330030003300310039005C0063006C0072002E0064006C006C000000

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exeCatalyst Control Center: Monitoring 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

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeCatalyst Control Center: Host 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

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exeCatalyst Control Center: Monitoring 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


CodeIntegrity Errors:
===================================
  Date: 2014-03-12 18:18:04.698
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\X\AppData\Local\Temp\A186A518-F170-4C9F-8893-36F9B5053704\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_c03ca3001653c1ef\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 18:18:02.100
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\X\AppData\Local\Temp\A186A518-F170-4C9F-8893-36F9B5053704\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-22 07:45:41.839
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-22 07:45:41.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 4095.55 MB
Available physical RAM: 1954.71 MB
Total Pagefile: 8189.29 MB
Available Pagefile: 5629.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:75.13 GB) (Free:39.28 GB) NTFS
Drive d: () (Fixed) (Total:390.53 GB) (Free:210.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000B0D4E)

Partition: GPT Partition Type.

==================== End Of Log ============================

Alt 14.03.2014, 19:50   #23
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Und das sind die Logfiles nach der halben Installation von Malwarebytes
hier stehen auch einige Errors dazu


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by X (administrator) on PHANT0M on 14-03-2014 19:48:08
Running from C:\Users\X\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Spotify Ltd) C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() D:\Games\League of Legends\RADS\system\rads_user_kernel.exe
() D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
() D:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] - C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKU\.DEFAULT\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\.DEFAULT\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\.DEFAULT\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoResolveSearch] 1
HKU\.DEFAULT\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [RocketDock] - C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Run: [Spotify Web Helper] - C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-02-16] (Spotify Ltd)
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-06] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-03-06] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovigo.com/?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&SSPV=SE1HB2_sp_ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x008CD126D995CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&q={searchTerms}&SSPV=SE1HB2_sp_ie
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default
FF user.js: detected! => C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\user.js
FF NewTab: about:home
FF DefaultSearchEngine: Conduit Search
FF SelectedSearchEngine: Conduit Search
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Adblock Plus - C:\Users\X\AppData\Roaming\Mozilla\Firefox\Profiles\9aws0x8x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-02]

Chrome: 
=======
CHR HomePage: hxxp://www.trovigo.com/?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&SSPV=SE1HB2_sp_ch
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP7B27DCAE-C582-45AF-B0F0-47B3EB25BC74&q={searchTerms}&SSPV=SE1HB2_sp_ch
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.149\pdf.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-10]
CHR Extension: (Google Drive) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-10]
CHR Extension: (YouTube) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-10]
CHR Extension: (Google-Suche) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-10]
CHR Extension: (avast! Online Security) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-08-10]
CHR Extension: (Arcane Legends) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmlkgieigeddcedpbijnpojheoddido [2013-08-10]
CHR Extension: (Amazon-Icon) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2014-03-12]
CHR Extension: (Google Wallet) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (ScriptSafe) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-08-10]
CHR Extension: (Google Mail) - C:\Users\X\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-10]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\X\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-03-11]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S4 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2454816 2014-03-06] (Conduit)
S4 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [1863680 2012-07-06] (Ralink)
S4 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [X]
S3 Secunia PSI Agent; "C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service [X]
S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-03-01] ()
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U4 SR; 
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-14 19:46 - 2014-03-14 19:48 - 00014076 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-14 19:45 - 2014-03-14 19:45 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-14 19:45 - 2014-03-14 19:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-14 19:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-14 19:41 - 2014-03-14 19:48 - 00000000 ____D () C:\FRST
2014-03-14 19:41 - 2014-03-14 19:41 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-12 20:44 - 2014-03-12 20:44 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-03-12 19:13 - 2014-03-12 19:14 - 00001603 _____ () C:\DelFix.txt
2014-03-12 18:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-03-12 18:19 - 2014-03-12 18:19 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-12 18:17 - 2014-03-12 18:17 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-12 18:17 - 2014-03-12 18:17 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-12 18:16 - 2014-03-12 18:23 - 00010332 _____ () C:\Windows\IE11_main.log
2014-03-12 18:07 - 2014-03-12 18:12 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-12 17:51 - 2014-03-12 18:07 - 00443528 _____ () C:\Windows\msxml4-KB973688-deu.LOG
2014-03-12 17:39 - 2014-03-12 17:39 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-03-12 17:31 - 2014-03-12 17:31 - 00000000 ____D () C:\Users\X\AppData\Local\Secunia PSI
2014-03-12 17:25 - 2014-03-12 17:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 17:21 - 2014-03-12 17:21 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-03-12 17:21 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-12 17:21 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-12 17:21 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-12 17:21 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-12 17:17 - 2014-03-12 17:16 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-12 17:16 - 2014-03-12 17:16 - 00000000 ____D () C:\Program Files\Java
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Users\X\AppData\Local\SearchProtect
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-03-12 12:04 - 2014-03-12 12:04 - 00000000 ____D () C:\Users\X\Documents\Ghost Games
2014-03-12 11:35 - 2014-03-12 12:04 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-11 23:08 - 2014-03-12 00:15 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-11 22:17 - 2014-03-11 22:17 - 00000000 ____D () C:\Users\X\AppData\Local\Temp188160de6693b97a1c1c68dca79180cd
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\ChromeExtensions
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\AppData\Local\Tempca358999e0cd7f115b52f50d5cf58b42
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-06 21:22 - 2014-03-12 19:13 - 00000000 ____D () C:\Windows\ERUNT
2014-03-04 23:11 - 2014-03-14 02:08 - 00000093 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:09 - 2014-03-01 00:33 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-03-02 02:40 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 07:47 - 2014-03-12 19:29 - 00044288 _____ () C:\Windows\PFRO.log
2014-02-21 15:41 - 2014-02-22 07:51 - 00000000 ____D () C:\Windows\erdnt
2014-02-21 07:43 - 2014-03-14 15:14 - 00001400 _____ () C:\Windows\setupact.log
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-16 18:01 - 2014-03-12 17:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 00:41 - 2014-02-13 01:14 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

==================== One Month Modified Files and Folders =======

2014-03-14 19:48 - 2014-03-14 19:46 - 00014076 _____ () C:\Users\X\Desktop\FRST.txt
2014-03-14 19:48 - 2014-03-14 19:41 - 00000000 ____D () C:\FRST
2014-03-14 19:45 - 2014-03-14 19:45 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-14 19:45 - 2014-03-14 19:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-14 19:41 - 2014-03-14 19:41 - 02157056 _____ (Farbar) C:\Users\X\Desktop\FRST64.exe
2014-03-14 19:26 - 2013-10-24 18:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 19:15 - 2013-08-10 15:52 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-14 18:52 - 2014-02-08 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-14 15:22 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-14 15:22 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-14 15:18 - 2013-08-09 19:06 - 01453296 _____ () C:\Windows\WindowsUpdate.log
2014-03-14 15:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-14 15:14 - 2014-02-21 07:43 - 00001400 _____ () C:\Windows\setupact.log
2014-03-14 03:37 - 2013-12-07 14:30 - 00000000 ____D () C:\Users\X\AppData\Local\Battle.net
2014-03-14 03:37 - 2013-08-10 20:27 - 00000000 ____D () C:\Users\X\AppData\Roaming\TS3Client
2014-03-14 02:52 - 2014-01-27 21:56 - 00000000 ____D () C:\Users\X\AppData\Roaming\Spotify
2014-03-14 02:08 - 2014-03-04 23:11 - 00000093 _____ () C:\Users\X\Desktop\Curse Voice.txt
2014-03-12 20:44 - 2014-03-12 20:44 - 00000000 ____D () C:\Users\X\AppData\Roaming\Malwarebytes
2014-03-12 20:43 - 2013-08-09 21:26 - 00001425 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-12 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-12 19:33 - 2010-11-21 07:50 - 00702964 _____ () C:\Windows\system32\perfh007.dat
2014-03-12 19:33 - 2010-11-21 07:50 - 00136524 _____ () C:\Windows\system32\perfc007.dat
2014-03-12 19:33 - 2009-07-14 06:13 - 01603106 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-12 19:29 - 2014-02-22 07:47 - 00044288 _____ () C:\Windows\PFRO.log
2014-03-12 19:29 - 2013-08-09 20:01 - 00000000 ____D () C:\Windows\Panther
2014-03-12 19:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-12 19:21 - 2014-01-02 13:53 - 00000000 ____D () C:\Windows\pss
2014-03-12 19:21 - 2013-08-09 21:26 - 00000000 ___RD () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-12 19:14 - 2014-03-12 19:13 - 00001603 _____ () C:\DelFix.txt
2014-03-12 19:13 - 2014-03-06 21:22 - 00000000 ____D () C:\Windows\ERUNT
2014-03-12 18:23 - 2014-03-12 18:16 - 00010332 _____ () C:\Windows\IE11_main.log
2014-03-12 18:19 - 2014-03-12 18:19 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 18:19 - 2014-03-12 18:19 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 18:19 - 2014-03-12 18:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-12 18:19 - 2014-03-12 18:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-12 18:19 - 2014-03-12 18:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-12 18:19 - 2014-03-12 18:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-12 18:19 - 2014-03-12 18:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-12 18:19 - 2014-03-12 18:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-12 18:18 - 2014-03-12 18:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-12 18:18 - 2014-03-12 18:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-12 18:17 - 2014-03-12 18:17 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-03-12 18:17 - 2014-03-12 18:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-12 18:17 - 2014-03-12 18:17 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-12 18:12 - 2014-03-12 18:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-12 18:07 - 2014-03-12 17:51 - 00443528 _____ () C:\Windows\msxml4-KB973688-deu.LOG
2014-03-12 18:05 - 2013-08-09 21:19 - 01576450 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-12 17:45 - 2013-09-02 19:22 - 00000000 ____D () C:\Users\X\AppData\Local\Adobe
2014-03-12 17:39 - 2014-03-12 17:39 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-03-12 17:31 - 2014-03-12 17:31 - 00000000 ____D () C:\Users\X\AppData\Local\Secunia PSI
2014-03-12 17:27 - 2014-02-16 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-12 17:27 - 2013-08-09 21:22 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-12 17:25 - 2014-03-12 17:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 17:21 - 2014-03-12 17:21 - 00005933 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-03-12 17:16 - 2014-03-12 17:17 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-12 17:16 - 2014-03-12 17:17 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-12 17:16 - 2014-03-12 17:17 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-12 17:16 - 2014-03-12 17:16 - 00000000 ____D () C:\Program Files\Java
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Users\X\AppData\Local\SearchProtect
2014-03-12 17:10 - 2014-03-12 17:10 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-03-12 12:04 - 2014-03-12 12:04 - 00000000 ____D () C:\Users\X\Documents\Ghost Games
2014-03-12 12:04 - 2014-03-12 11:35 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-12 00:15 - 2014-03-11 23:08 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-11 22:33 - 2013-10-24 18:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 22:33 - 2013-09-02 19:23 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 22:33 - 2013-09-02 19:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 22:17 - 2014-03-11 22:17 - 00000000 ____D () C:\Users\X\AppData\Local\Temp188160de6693b97a1c1c68dca79180cd
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\ChromeExtensions
2014-03-11 22:09 - 2014-03-11 22:09 - 00000000 ____D () C:\Users\X\AppData\Local\Tempca358999e0cd7f115b52f50d5cf58b42
2014-03-11 22:09 - 2013-08-09 21:26 - 00000000 ____D () C:\Users\X
2014-03-11 04:59 - 2014-03-11 04:59 - 00000888 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-10 15:41 - 2014-01-27 21:58 - 00000000 ____D () C:\Users\X\AppData\Local\Spotify
2014-03-08 00:13 - 2014-03-08 00:13 - 00000208 _____ () C:\Users\X\Desktop\Call of Duty Black Ops II - Multiplayer.url
2014-03-02 02:40 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Client
2014-03-01 01:55 - 2014-03-01 01:55 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-03-01 00:41 - 2014-03-01 00:41 - 00000085 _____ () C:\Windows\wininit.ini
2014-03-01 00:33 - 2014-03-01 00:33 - 00115600 _____ () C:\Windows\system32\.crusader
2014-03-01 00:33 - 2014-03-01 00:09 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-01 00:07 - 2014-03-01 00:07 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-03-01 00:05 - 2014-03-01 00:05 - 00000000 ____D () C:\ProgramData\SUPERSetup
2014-02-27 18:20 - 2014-02-27 18:20 - 00000984 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-02-27 18:20 - 2014-02-27 18:20 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse Advertising
2014-02-27 18:19 - 2014-02-27 18:19 - 00000000 ____D () C:\Users\X\AppData\Roaming\Curse
2014-02-27 14:05 - 2014-02-27 14:05 - 00190306 _____ () C:\Users\X\Desktop\lcs.xps
2014-02-22 08:04 - 2013-08-09 19:11 - 00000000 ____D () C:\Program Files (x86)\RocketDock
2014-02-22 07:51 - 2014-02-21 15:41 - 00000000 ____D () C:\Windows\erdnt
2014-02-22 07:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-21 07:43 - 2014-02-21 07:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 16:35 - 2013-08-16 22:48 - 00000000 ____D () C:\Windows\Minidump
2014-02-20 16:34 - 2013-12-04 15:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-20 14:37 - 2014-02-20 14:37 - 00000000 _____ () C:\Windows\system32\sfc
2014-02-17 21:22 - 2013-09-02 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 19:14 - 2014-01-27 21:58 - 00001784 _____ () C:\Users\X\Desktop\Spotify.lnk
2014-02-16 19:14 - 2014-01-27 21:58 - 00001770 _____ () C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-02-13 01:14 - 2014-02-13 00:41 - 00000000 ____D () C:\Users\X\AppData\Roaming\TeamViewer

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 21:13

==================== End Of Log ============================
--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by X at 2014-03-14 19:48:31
Running from C:\Users\X\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.149 - Google Inc.)
K-Lite Codec Pack (64-bit) v4.5.0 (HKLM\...\KLiteCodecPack64_is1) (Version: 4.5.0 - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

==================== Restore Points  =========================

12-03-2014 18:13:59 Ende der Bereinigung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-02-22 07:48 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03B8D0BD-2435-4308-8714-1ECEB9B736CC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {16A0C00C-8F9A-42C9-9902-BE42809843BB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {58832227-D83B-438B-807F-5952C5AD4125} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-10] (Google Inc.)
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {C12C6665-7821-4E3B-802F-8A2B1F816A03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-10] (Google Inc.)
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 16:06 - 2013-12-06 16:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2013-08-09 19:13 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2013-08-09 19:11 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2013-12-06 16:06 - 2013-12-06 16:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-25 16:48 - 2013-11-21 20:21 - 01294336 _____ () D:\Games\League of Legends\RADS\system\rads_user_kernel.exe
2014-01-25 16:48 - 2014-03-07 23:21 - 05325152 _____ () D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\LoLLauncher.exe
2014-01-25 16:48 - 2014-01-17 23:02 - 00074752 _____ () D:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.75\deploy\LolClient.exe
2013-08-09 19:11 - 2007-09-02 12:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2013-09-01 22:06 - 2009-10-31 06:13 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Pyra Mouse\hiddriver.dll
2014-02-16 18:01 - 2014-02-16 18:01 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-25 16:48 - 2014-03-07 23:21 - 00265056 _____ () D:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.202\deploy\RiotLauncher.dll
2014-03-11 22:33 - 2014-03-11 22:33 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: BackupStack => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: RalinkRegistryWriter => 2
MSCONFIG\Services: RalinkRegistryWriter64 => 2
MSCONFIG\Services: RaMediaServer => 2
MSCONFIG\Services: RzKLService => 2
MSCONFIG\Services: SplashtopRemoteService => 2
MSCONFIG\Services: SSUService => 2
MSCONFIG\Services: Update outobox => 2
MSCONFIG\startupfolder: C:^Users^X^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Spotify => "C:\Users\X\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\X\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/14/2014 03:16:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 11:51:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:44:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.75.0.1, Zeitstempel: 0x511f8eb2
Name des fehlerhaften Moduls: OLEAUT32.dll, Version: 6.1.7601.17676, Zeitstempel: 0x4e58702a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001604c
ID des fehlerhaften Prozesses: 0x9c4
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (03/12/2014 07:30:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:13:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9016, Zeitstempel: 0x52a1d50f
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db9710
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000332b0
ID des fehlerhaften Prozesses: 0x10b8
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (03/12/2014 06:04:17 PM) (Source: MsiInstaller) (User: PHANT0M)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Host application" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Monitoring program" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Host application" konnte nicht heruntergefahren werden.

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager) (User: PHANT0M)
Description: Die Anwendung oder der Dienst "Catalyst Control Center: Monitoring program" konnte nicht heruntergefahren werden.


System errors:
=============
Error: (03/14/2014 03:15:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/13/2014 11:49:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/12/2014 07:29:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/12/2014 05:28:57 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (03/14/2014 03:16:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 11:51:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:44:41 PM) (Source: Application Error)(User: )
Description: mbam.exe1.75.0.1511f8eb2OLEAUT32.dll6.1.7601.176764e58702ac00000050001604c9c401cf3e2b7ec836c0C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeC:\Windows\syswow64\OLEAUT32.dllc0918570-aa1e-11e3-a79d-f16c2ec03e24

Error: (03/12/2014 07:30:33 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:13:36 PM) (Source: Application Error)(User: )
Description: PSIA.exe3.0.0.901652a1d50fntdll.dll6.1.7601.1820551db9710c0000005000332b010b801cf3e1078d98d60C:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\Windows\SysWOW64\ntdll.dll073c0ca0-aa12-11e3-b9ba-a76100c33f29

Error: (03/12/2014 06:04:17 PM) (Source: MsiInstaller)(User: PHANT0M)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeCatalyst Control Center: Host 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

Error: (03/12/2014 05:48:10 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exeCatalyst Control Center: Monitoring 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

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeCatalyst Control Center: Host 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

Error: (03/12/2014 05:47:30 PM) (Source: Microsoft-Windows-RestartManager)(User: PHANT0M)
Description: 1C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exeCatalyst Control Center: Monitoring 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


CodeIntegrity Errors:
===================================
  Date: 2014-03-12 18:18:04.698
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\X\AppData\Local\Temp\A186A518-F170-4C9F-8893-36F9B5053704\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_c03ca3001653c1ef\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 18:18:02.100
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\X\AppData\Local\Temp\A186A518-F170-4C9F-8893-36F9B5053704\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-22 07:45:41.839
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-22 07:45:41.792
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 53%
Total physical RAM: 4095.55 MB
Available physical RAM: 1922.18 MB
Total Pagefile: 8189.29 MB
Available Pagefile: 5574.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:75.13 GB) (Free:39.25 GB) NTFS
Drive d: () (Fixed) (Total:390.53 GB) (Free:210.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000B0D4E)

Partition: GPT Partition Type.

==================== End Of Log ============================

Alt 15.03.2014, 17:12   #24
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-06] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-03-06] (Conduit)

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.03.2014, 19:15   #25
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by X at 2014-03-15 19:15:04 Run:1
Running from C:\Users\X\Desktop\FRST
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355040 2014-03-06] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-03-06] (Conduit)

*****************

HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoInternetOpenWith => Value deleted successfully.
HKU\S-1-5-21-1637580094-1292609826-1814546496-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowRun => Value deleted successfully.
"C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC64Loader.dll" => Value Data removed successfully.
"C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC32Loader.dll" => Value Data removed successfully.

==== End of Fixlog ====

Alt 16.03.2014, 17:33   #26
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


MBAM nochmal versuchen, wenn es wieder nicht klappt MBAM Support anschreiben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.03.2014, 20:02   #27
Phant0m
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Hallo,
danke für die Hilfe hat leider auch nicht geklappt.

Grüße

Alt 17.03.2014, 10:50   #28
schrauber
/// the machine
/// TB-Ausbilder
 
Virus blockiert Diverse VirenScanner - Standard

Virus blockiert Diverse VirenScanner


Ok dann schreib die mal an, keine Ahnung was da los ist.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort
Seite 2 von 2 1 2

Themen zu Virus blockiert Diverse VirenScanner
anhang, blockiert, desktop, explorer.exe, knapp, malwarebytes, mobogenie, mobogenie entfernen, recover, scan, starten, virus, win32/downloadsponsor.a, win32/mobogenie.a, win32/nextlive.a


« Vermutung: AppRound.us Virus nach Installation einer Freeware - VBates Funde | lenovo g570 testen »


Ähnliche Themen: Virus blockiert Diverse VirenScanner


  1. Virus schaltet Virenscanner ab!
    Log-Analyse und Auswertung - 13.05.2015 (15)
  2. Windows 7: Virenscanner hat Virus entdeckt
    Log-Analyse und Auswertung - 01.02.2015 (5)
  3. Windows 7: Gruppenrichtlinie blockiert Avira und andere Versuche Virenscanner zu installieren
    Log-Analyse und Auswertung - 20.08.2014 (9)
  4. Windows7 - Trojaner(?) blockiert Virenscanner etc
    Log-Analyse und Auswertung - 13.06.2014 (13)
  5. System Care Antivirus blockiert diverse Programme
    Plagegeister aller Art und deren Bekämpfung - 06.06.2013 (17)
  6. PCK/PESpin: gefährliche Malware oder jagt der PC Virenscanner den Homeserver-Virenscanner?
    Plagegeister aller Art und deren Bekämpfung - 01.04.2013 (2)
  7. Virus Blockiert Virenscanner und Firewall, ewwy7owwge.exe
    Log-Analyse und Auswertung - 20.02.2013 (17)
  8. Virus ? Trojaner ? - Virenscanner starten mit Verzögerung
    Plagegeister aller Art und deren Bekämpfung - 20.03.2012 (1)
  9. Zahlungsaufforderung durch Avira Virenscanner, "Ihr Windowssystem wurde blockiert"
    Log-Analyse und Auswertung - 10.02.2012 (3)
  10. Antivir findet diverse Viren und Warnmeldung blockiert Windows
    Plagegeister aller Art und deren Bekämpfung - 09.02.2012 (11)
  11. Windows XP blockiert - leider am Virenscanner vorbei :-(
    Log-Analyse und Auswertung - 06.01.2012 (4)
  12. PC bzw.Screen durch Virus/Malware blockiert; Taskmgr und Regedit blockiert nur MS-Dos funktioniert
    Plagegeister aller Art und deren Bekämpfung - 24.12.2011 (14)
  13. Virus gibt sich als Virenscanner aus
    Log-Analyse und Auswertung - 08.01.2009 (0)
  14. Virenscanner als Virenscanner unzulässige Win32 Anwendung, mrofinu1386.exe
    Plagegeister aller Art und deren Bekämpfung - 05.03.2008 (48)
  15. Deaktivierter Virenscanner durch einen Virus??
    Plagegeister aller Art und deren Bekämpfung - 08.01.2007 (16)
  16. Ports blockiert - Virenscanner sagt ok
    Log-Analyse und Auswertung - 11.04.2006 (11)
  17. Virus schaltet alle Virenscanner ab!?!?!
    Plagegeister aller Art und deren Bekämpfung - 18.10.2004 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Virus blockiert Diverse VirenScanner - So Voila FRST LogFile FRST Logfile: FRST Logfile: Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014 Ran by X (administrator) on PHANT0M - Virus blockiert Diverse VirenScanner...
Archiv
Du betrachtest: Virus blockiert Diverse VirenScanner auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55