Ne Policy zurück gesetzt die Original so nicht gesetzt ist. In dem Fall im Rechtsklickmenü.



ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hier die Logdatei vom Eset Online Scanner:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=dfeadaa9f9b9b342a785bbdc631f03eb
# engine=18048
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-27 01:38:22
# local_time=2014-04-27 03:38:22 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 9387467 150235752 0 0
# scanned=825042
# found=1
# cleaned=0
# scan_time=12755
# nod_component=V3 Build:0x30000000
sh=8B6CF89BDE25F47D67A3CB2E90524F02576E4365 ft=1 fh=c6b823c50b63b9f4 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="E:\Adventure\Sleeping Dogs\buddha.dll"
         

Was den Fund von ESET betrifft, so handelt es sich dabei um einen NoCD-Patch für ein Spielt, welches ich im Original besitze - damit keine Fragen aufkommen - aber nicht die Lust hab immer die DVD einzulegen.

Hier die vom SecurityCheck:

 Results of screen317's Security Check version 0.99.82  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
ESET Endpoint Antivirus 5.0   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 55  
 Java 8 Update 5  
 Adobe Flash Player 13.0.0.199  
 Adobe Reader XI  
 Mozilla Firefox (29.0) 
````````Process Check: objlist.exe by Laurent````````  
 ESET NOD32 Antivirus egui.exe  
 ESET NOD32 Antivirus ekrn.exe  
 ESET ESET Endpoint Antivirus EShaSrv.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Und hier die aktuelle FRST.txt:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-04-2014
Ran by GrenSo (administrator) on 790FX-PHENOM-X4 on 27-04-2014 16:04:27
Running from C:\Users\GrenSo\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
( ) C:\Windows\system32\lxcgcoms.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(H+H Software GmbH) C:\Program Files (x86)\Virtual CD v10\System\VC10SecS.exe
() C:\Program Files (x86)\AMD\AMD Power Monitor\AMD Power Monitor.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 2300 Series\lxcgmon.exe
(Lexmark International Inc.) C:\Program Files (x86)\Lexmark 2300 Series\ezprint.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(PeerBlock, LLC) C:\Program Files\PeerBlock\peerblock.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(FastStone Soft) C:\Program Files (x86)\FastStone Capture\FSCapture.exe
() C:\Program Files (x86)\Razer\Diamondback\Razer\Diamondback\razerhid.exe
(Razer USA Ltd.) C:\Program Files (x86)\Razer\Reclusa\razerhid.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
() C:\Program Files (x86)\NaturalPoint\TrackIR4\TrackIR.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(H+H Software GmbH) C:\Program Files (x86)\Virtual CD v10\System\VC10Play.exe
() C:\Program Files (x86)\Razer\Reclusa\razertra.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Core Temp\Core Temp.exe
(Binarysense) C:\Program Files (x86)\SSDlife\ssdlife.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
(Microsoft Corporation) C:\Program Files (x86)\EMET 4.0\EMET_Agent.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\Razer\Diamondback\Razer\Diamondback\razertra.exe
(H+H Software GmbH) C:\Program Files (x86)\Virtual CD v10\System\VC10Tray.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Diamondback\Razer\Diamondback\razerofa.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Power Monitor] => C:\Program Files (x86)\AMD\AMD Power Monitor\AMD Power Monitor.exe [624640 2009-05-21] ()
HKLM\...\Run: [lxcgmon.exe] => C:\Program Files (x86)\Lexmark 2300 Series\lxcgmon.exe [205744 2007-04-29] (Lexmark International, Inc.)
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark 2300 Series\ezprint.exe [103344 2007-04-29] (Lexmark International Inc.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [517912 2013-02-15] (Acronis)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-04-18] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [4148664 2013-10-07] (ESET)
HKLM\...\Run: [LXCGCATS] => C:\Windows\system32\spool\DRIVERS\x64\3\LXCGtime.dll [28672 2007-02-22] ()
HKLM-x32\...\Run: [Diamondback] => C:\Program Files (x86)\Razer\Diamondback\Razer\Diamondback\razerhid.exe [226816 2009-10-09] ()
HKLM-x32\...\Run: [Reclusa] => C:\Program Files (x86)\Razer\Reclusa\razerhid.exe [292352 2010-01-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [adm_tray.exe] => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [NaturalPoint] => C:\Program Files (x86)\NaturalPoint\TrackIR4\TrackIR.exe [1152592 2012-10-11] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)
HKLM-x32\...\Run: [VC10Player] => C:\Program Files (x86)\Virtual CD v10\System\VC10Play.exe [411976 2011-10-19] (H+H Software GmbH)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM-x32\...\Run: [AntiLogger] => C:\Program Files (x86)\AntiLogger\AntiLogger.exe [19362728 2014-03-26] (Zemana Ltd.)
HKLM-x32\...\Run: [EMET Agent] => C:\Program Files (x86)\EMET 4.0\EMET_agent.exe [78496 2013-06-14] (Microsoft Corporation)
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [508144 2013-11-14] (QFX Software Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-03-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1825984 2014-04-24] (Valve Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM\...\Policies\Explorer: [CDRAutoRun] 0
HKU\S-1-5-21-1996915005-1308554187-4098229939-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1996915005-1308554187-4098229939-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-1996915005-1308554187-4098229939-1000\...\Run: [PeerBlock] => C:\Program Files\PeerBlock\peerblock.exe [2513992 2014-01-14] (PeerBlock, LLC)
HKU\S-1-5-21-1996915005-1308554187-4098229939-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [761864 2014-04-16] (Sandboxie Holdings, LLC)
Startup: C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk
ShortcutTarget: FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/de-de/default.aspx
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xACD295AE5894CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: livecall - No CLSID Value - 
Handler: msnim - No CLSID Value - 
Handler-x32: livecall - No CLSID Value - 
Handler-x32: msnim - No CLSID Value - 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.66.1

FireFox:
========
FF ProfilePath: C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default
FF NewTab: google.de
FF Homepage: hxxp://www.winboard.org/|hxxp://www.fcenergie.de/content/home
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_199.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_199.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll No File
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Roomy Bookmarks Toolbar - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\ALone-live@ya.ru [2014-04-18]
FF Extension: Wörterbuch Deutsch (de-DE), Hunspell-unterstützt - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\de_DE@dicts.j3e.de [2014-04-18]
FF Extension: United States English Spellchecker - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\en-US@dictionaries.addons.mozilla.org [2014-04-18]
FF Extension: MinimizeToTray revived (MinTrayR) - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\mintrayr@tn123.ath.cx [2014-04-18]
FF Extension: Forecastfox - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-04-18]
FF Extension: FoxClocks - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2014-04-18]
FF Extension: about:addons Launcher - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\aboutaddons@about-addons-launcher.org.xpi [2014-04-18]
FF Extension: Locationbar² - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\locationbar2@design-noir.de.xpi [2014-04-18]
FF Extension: Long URL Please Mod - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\longurlplease@tseng.xpi [2014-04-18]
FF Extension: Secure Login - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\secureLogin@blueimp.net.xpi [2014-04-18]
FF Extension: Slim Add-ons Manager - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\slimaddonmanager@opendfki.de.xpi [2014-04-18]
FF Extension: Tab Scope - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\tabscope@xuldev.org.xpi [2014-04-18]
FF Extension: Flagfox - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-04-18]
FF Extension: NoScript - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-04-18]
FF Extension: Tab Mix Plus - C:\Users\GrenSo\AppData\Roaming\Mozilla\Firefox\Profiles\0rm2ca40.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-04-18]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird
FF Extension: ESET Endpoint Security Extension - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2014-04-18]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird
FF Extension: ESET Endpoint Security Extension - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2014-04-18]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-03-12] (Advanced Micro Devices, Inc.)
S2 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [137584 2014-01-08] ()
S3 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
S4 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [85104 2012-09-18] ()
S4 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [78352 2012-09-19] (CyberLink)
S4 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [295440 2012-09-19] (CyberLink)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [42048 2013-10-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [1025584 2013-10-07] (ESET)
R2 ESHASRV; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [191368 2013-10-07] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-02-28] (Futuremark)
R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-03-14] (IObit)
R2 lxcg_device; C:\Windows\system32\lxcgcoms.exe [566704 2007-04-29] ( )
R2 lxcg_device; C:\Windows\SysWOW64\lxcgcoms.exe [537520 2007-04-29] ( )
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-04-18] (Malwarebytes Corporation)
S4 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [189960 2014-04-16] (Sandboxie Holdings, LLC)
S4 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
S4 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
R2 VC10SecS; C:\Program Files (x86)\Virtual CD v10\System\VC10SecS.exe [144712 2011-10-19] (H+H Software GmbH)
S2 PnkBstrA; No ImagePath
S2 PnkBstrB; No ImagePath

==================== Drivers (Whitelisted) ====================

R1 A2DDA; C:\PROGRAM FILES (X86)\EMSISOFT EMERGENCY KIT\RUN\a2ddax64.sys [26176 2013-08-20] (Emsisoft GmbH)
R1 AntiLog32; C:\Windows\system32\drivers\AntiLog64.sys [49752 2014-04-18] (Zemana Ltd.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R2 AODDriver4.3.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices)
S3 atillk64; No ImagePath
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-10-03] ()
S3 cleanhlp; C:\PROGRAM FILES (X86)\EMSISOFT EMERGENCY KIT\RUN\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [219184 2013-10-25] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [185224 2013-09-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [155896 2013-09-09] (ESET)
S3 ENTECH; C:\Windows\SysWow64\Drivers\ENTECH.sys [21664 2004-10-25] (EnTech Taiwan)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [147096 2013-09-09] (ESET)
S1 ESProtectionDriver; No ImagePath
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [422400 2012-03-16] (Huawei Technologies Co., Ltd.)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-02-06] ()
S3 HH10Help.sys; C:\Windows\system32\drivers\HH10Help.sys [24088 2009-07-09] (H+H Software GmbH)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [227840 2012-03-16] (Huawei Technologies Co., Ltd.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2013-10-16] (REALiX(tm))
R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-10-03] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-04-18] (Malwarebytes Corporation)
S3 MEMSWEEP2; No ImagePath
R3 MTKSCVAD; C:\Windows\System32\drivers\mtkvadx.sys [44544 2012-07-16] (Ralink Technology, Corp.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [38400 2012-07-10] ()
R0 ocz10xx; C:\Windows\System32\DRIVERS\ocz10xx.sys [75056 2014-03-07] (OCZ Storage Solutions)
R0 ocztrimfilter; C:\Windows\System32\DRIVERS\ocztrimfilter.sys [18400 2014-03-07] (OCZ Storage Solutions)
R3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
R3 Razerlow; C:\Windows\System32\drivers\Razerlow.sys [11136 2013-11-05] (Razer (Asia-Pacific) Pte Ltd)
R3 RecFltr; C:\Windows\System32\drivers\RecFltr.sys [44800 2010-01-04] (Razer USA Ltd.)
S3 SANDRA; No ImagePath
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [202248 2014-04-16] (Sandboxie Holdings, LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-04-06] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-04-06] (Acronis)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-02-20] (Oracle Corporation)
R1 vdrv1000; C:\Windows\System32\DRIVERS\vdrv1000.sys [223256 2011-04-19] (H+H Software GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-04-06] (Acronis International GmbH)
S3 WinRing0_1_2_0; No ImagePath
S3 WN111v2; C:\Windows\System32\DRIVERS\WN111v2w7x.sys [767488 2009-10-21] (Atheros Communications, Inc.)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [146928 2012-09-19] (CyberLink Corp.)
R3 ALSysIO; \??\C:\Users\GrenSo\AppData\Local\Temp\ALSysIO64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U0 Partizan; system32\drivers\Partizan.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-27 16:04 - 2014-04-27 16:04 - 00004688 _____ () C:\Users\GrenSo\Desktop\FRST.txt
2014-04-27 16:01 - 2014-04-27 16:01 - 00000864 _____ () C:\Users\GrenSo\Desktop\checkup.txt
2014-04-26 18:03 - 2014-04-26 18:03 - 00855379 _____ () C:\Users\GrenSo\Desktop\SecurityCheck.exe
2014-04-25 21:59 - 2014-04-25 21:59 - 00000000 ____D () C:\Users\GrenSo\Desktop\JRT
2014-04-25 21:17 - 2014-04-25 21:17 - 00000000 ____D () C:\Windows\ERUNT
2014-04-25 21:09 - 2014-04-25 21:09 - 00000486 _____ () C:\Users\GrenSo\Desktop\mbam.txt
2014-04-25 19:51 - 2014-04-25 19:51 - 01016261 _____ (Thisisu) C:\Users\GrenSo\Desktop\JRT.exe
2014-04-25 00:49 - 2014-04-25 00:49 - 00000000 _____ () C:\Windows\SysWOW64\FAP50E4.tmp
2014-04-25 00:48 - 2014-04-25 00:48 - 00000000 _____ () C:\Windows\SysWOW64\FAPB99.tmp
2014-04-25 00:46 - 2014-04-25 00:46 - 00000000 _____ () C:\Windows\SysWOW64\FAP49DE.tmp
2014-04-25 00:34 - 2014-04-25 00:34 - 00000000 _____ () C:\Windows\SysWOW64\FAP3B4C.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPD68F.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPC435.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPB796.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAP7D04.tmp
2014-04-25 00:27 - 2014-04-25 00:27 - 00000000 _____ () C:\Windows\SysWOW64\FAPBDB9.tmp
2014-04-25 00:27 - 2014-04-25 00:27 - 00000000 _____ () C:\Windows\SysWOW64\FAP7D1F.tmp
2014-04-25 00:17 - 2014-04-25 00:17 - 00000000 _____ () C:\Windows\SysWOW64\FAP69EB.tmp
2014-04-25 00:11 - 2014-04-25 00:11 - 00000000 ____D () C:\Users\GrenSo\AppData\Local\CrashRpt
2014-04-24 20:40 - 2014-04-24 20:40 - 00000000 ____D () C:\Users\GrenSo\Desktop\ComboFix
2014-04-24 20:18 - 2014-04-24 20:18 - 00047211 _____ () C:\ComboFix.txt
2014-04-24 19:48 - 2014-04-24 20:18 - 00000000 ____D () C:\Qoobox
2014-04-24 19:48 - 2014-04-24 20:18 - 00000000 ____D () C:\ComboFix
2014-04-24 19:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-24 19:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-24 19:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-24 19:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-24 19:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-24 19:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-24 19:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-24 19:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-24 19:47 - 2014-04-24 20:13 - 00000000 ____D () C:\Windows\erdnt
2014-04-24 19:44 - 2014-04-26 18:04 - 00000000 ____D () C:\Users\GrenSo\Desktop\FRST
2014-04-24 19:44 - 2014-04-24 19:44 - 05196870 ____R (Swearware) C:\Users\GrenSo\Desktop\ComboFix.exe
2014-04-23 23:58 - 2014-04-24 20:12 - 00001844 _____ () C:\Windows\PFRO.log
2014-04-23 19:26 - 2014-04-27 16:04 - 00000000 ____D () C:\FRST
2014-04-23 19:24 - 2014-04-24 19:42 - 02061824 _____ (Farbar) C:\Users\GrenSo\Desktop\FRST64.exe
2014-04-23 18:57 - 2014-04-23 18:57 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-04-23 07:54 - 2014-04-27 11:50 - 00000896 _____ () C:\Windows\setupact.log
2014-04-23 07:54 - 2014-04-23 07:54 - 05153400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-23 07:54 - 2014-04-23 07:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-23 01:17 - 2014-04-23 01:17 - 00146320 _____ () C:\Users\GrenSo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-22 23:36 - 2014-04-22 23:36 - 00000000 _____ () C:\Users\GrenSo\defogger_reenable
2014-04-22 23:04 - 2014-04-22 23:04 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-04-22 23:04 - 2014-04-22 23:04 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Apple Computer
2014-04-22 23:01 - 2014-04-22 23:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-22 23:01 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-22 23:01 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-21 20:07 - 2014-04-21 19:57 - 00002122 _____ () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Endpoint Antivirus.lnk
2014-04-18 21:08 - 2014-04-18 21:08 - 00000000 ____D () C:\ProgramData\ESET
2014-04-18 21:08 - 2014-04-18 21:08 - 00000000 ____D () C:\Program Files\ESET
2014-04-18 20:41 - 2014-04-18 20:41 - 00000000 __SHD () C:\Users\GrenSo\AppData\Local\EmieUserList
2014-04-18 20:41 - 2014-04-18 20:41 - 00000000 __SHD () C:\Users\GrenSo\AppData\Local\EmieSiteList
2014-04-18 19:18 - 2014-04-18 19:18 - 00901848 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-04-18 19:18 - 2014-04-18 19:18 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-04-18 19:04 - 2014-04-18 19:04 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-04-18 19:04 - 2014-04-18 19:04 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-04-18 17:44 - 2014-04-18 17:44 - 00002181 _____ () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-18 17:39 - 2014-03-25 15:27 - 00254240 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-04-18 17:39 - 2014-03-25 15:24 - 00128288 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2014-04-18 17:35 - 2014-04-18 17:35 - 00000000 __HDC () C:\ProgramData\{727C5CC8-3A5E-4517-BA8B-35A93F9B2EBD}
2014-04-18 17:28 - 2014-04-18 17:28 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-18 16:51 - 2014-04-18 16:48 - 00000513 _____ () C:\Users\GrenSo\Documents\indexfile.txt
2014-04-17 21:52 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-17 21:52 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-17 21:52 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-17 21:52 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-17 21:52 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-17 21:52 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-17 21:52 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-17 21:52 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-17 21:52 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-17 21:52 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-17 21:52 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-17 21:52 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-17 21:52 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-17 21:52 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-17 21:52 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-17 21:52 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-17 21:52 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-17 21:52 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-17 21:52 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-17 21:52 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-17 21:52 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-17 21:52 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-17 21:52 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-17 21:52 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-17 21:52 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-17 21:52 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-17 21:52 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-17 21:52 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-17 21:52 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-17 21:52 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-17 21:52 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-17 21:52 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-17 21:52 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-17 21:52 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-17 21:52 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-17 21:52 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-17 21:52 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-17 21:52 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-17 21:52 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-17 21:52 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-17 21:52 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-17 21:52 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-17 21:52 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-17 21:52 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-17 21:52 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-17 21:52 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-17 21:52 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-17 21:52 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-17 21:46 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-17 21:46 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-17 21:46 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-17 21:46 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-17 21:46 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-17 21:46 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-17 21:46 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-17 21:46 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-17 21:46 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-17 21:46 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-17 21:46 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-17 21:38 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-17 21:38 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-17 21:38 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-17 21:38 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-17 21:38 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-17 21:38 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-16 05:02 - 2014-04-16 05:02 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-03-30 18:28 - 2014-03-07 16:38 - 00132608 _____ (OCZ Storage Solutions) C:\Windows\system32\OczTrimCoinstaller.dll
2014-03-30 18:28 - 2014-03-07 16:38 - 00075056 _____ (OCZ Storage Solutions) C:\Windows\system32\Drivers\ocz10xx.sys
2014-03-30 18:28 - 2014-03-07 16:38 - 00018400 _____ (OCZ Storage Solutions) C:\Windows\system32\Drivers\ocztrimfilter.sys

==================== One Month Modified Files and Folders =======

2014-04-27 16:04 - 2014-04-27 16:04 - 00025598 _____ () C:\Users\GrenSo\Desktop\FRST.txt
2014-04-27 16:04 - 2014-04-23 19:26 - 00000000 ____D () C:\FRST
2014-04-27 16:01 - 2014-04-27 16:01 - 00000864 _____ () C:\Users\GrenSo\Desktop\checkup.txt
2014-04-27 16:00 - 2013-03-04 09:00 - 00116083 _____ () C:\Users\GrenSo\Network_Meter_Data.js
2014-04-27 12:00 - 2009-07-14 19:58 - 00786872 _____ () C:\Windows\system32\perfh007.dat
2014-04-27 12:00 - 2009-07-14 19:58 - 00181826 _____ () C:\Windows\system32\perfc007.dat
2014-04-27 12:00 - 2009-07-14 07:13 - 01837466 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-27 11:58 - 2009-07-14 06:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-27 11:58 - 2009-07-14 06:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-27 11:52 - 2014-01-07 20:47 - 01962957 _____ () C:\Windows\WindowsUpdate.log
2014-04-27 11:52 - 2013-10-15 19:15 - 00049219 _____ () C:\Users\GrenSo\IP_Log_Data.js
2014-04-27 11:51 - 2014-02-09 20:32 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-27 11:51 - 2012-09-16 23:01 - 00000000 ____D () C:\Program Files\PeerBlock
2014-04-27 11:50 - 2014-04-23 07:54 - 00000896 _____ () C:\Windows\setupact.log
2014-04-27 11:50 - 2013-03-06 20:38 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-27 11:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-26 20:22 - 2013-03-04 09:36 - 00000026 _____ () C:\Users\GrenSo\AppData\Roaming\Network Meter_Usage.ini
2014-04-26 18:04 - 2014-04-24 19:44 - 00000000 ____D () C:\Users\GrenSo\Desktop\FRST
2014-04-26 18:03 - 2014-04-26 18:03 - 00855379 _____ () C:\Users\GrenSo\Desktop\SecurityCheck.exe
2014-04-26 10:31 - 2014-02-09 20:32 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-25 21:59 - 2014-04-25 21:59 - 00000000 ____D () C:\Users\GrenSo\Desktop\JRT
2014-04-25 21:34 - 2012-09-16 19:50 - 00000000 ____D () C:\Program Files (x86)\SRWare Iron
2014-04-25 21:17 - 2014-04-25 21:17 - 00000000 ____D () C:\Windows\ERUNT
2014-04-25 21:12 - 2013-11-24 21:36 - 00000000 ____D () C:\AdwCleaner
2014-04-25 21:11 - 2013-09-25 18:55 - 00000000 ____D () C:\Program Files (x86)\AdwCleaner
2014-04-25 21:09 - 2014-04-25 21:09 - 00000486 _____ () C:\Users\GrenSo\Desktop\mbam.txt
2014-04-25 19:51 - 2014-04-25 19:51 - 01016261 _____ (Thisisu) C:\Users\GrenSo\Desktop\JRT.exe
2014-04-25 19:24 - 2013-03-23 22:12 - 00000000 ____D () C:\Program Files\McAfee AVERT Stinger
2014-04-25 00:53 - 2012-09-17 08:12 - 00000000 ____D () C:\Users\GrenSo\SecurityScans
2014-04-25 00:49 - 2014-04-25 00:49 - 00000000 _____ () C:\Windows\SysWOW64\FAP50E4.tmp
2014-04-25 00:48 - 2014-04-25 00:48 - 00000000 _____ () C:\Windows\SysWOW64\FAPB99.tmp
2014-04-25 00:46 - 2014-04-25 00:46 - 00000000 _____ () C:\Windows\SysWOW64\FAP49DE.tmp
2014-04-25 00:34 - 2014-04-25 00:34 - 00000000 _____ () C:\Windows\SysWOW64\FAP3B4C.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPD68F.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPC435.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAPB796.tmp
2014-04-25 00:29 - 2014-04-25 00:29 - 00000000 _____ () C:\Windows\SysWOW64\FAP7D04.tmp
2014-04-25 00:27 - 2014-04-25 00:27 - 00000000 _____ () C:\Windows\SysWOW64\FAPBDB9.tmp
2014-04-25 00:27 - 2014-04-25 00:27 - 00000000 _____ () C:\Windows\SysWOW64\FAP7D1F.tmp
2014-04-25 00:17 - 2014-04-25 00:17 - 00000000 _____ () C:\Windows\SysWOW64\FAP69EB.tmp
2014-04-25 00:11 - 2014-04-25 00:11 - 00000000 ____D () C:\Users\GrenSo\AppData\Local\CrashRpt
2014-04-25 00:11 - 2011-01-01 15:00 - 00000000 ____D () C:\Users\GrenSo\Documents\My Games
2014-04-24 23:30 - 2012-09-16 23:06 - 00000000 ____D () C:\Program Files\Paint.NET
2014-04-24 23:19 - 2013-11-05 00:56 - 00000000 ____D () C:\ProgramData\ProductData
2014-04-24 20:40 - 2014-04-24 20:40 - 00000000 ____D () C:\Users\GrenSo\Desktop\ComboFix
2014-04-24 20:18 - 2014-04-24 20:18 - 00047211 _____ () C:\ComboFix.txt
2014-04-24 20:18 - 2014-04-24 19:48 - 00000000 ____D () C:\Qoobox
2014-04-24 20:18 - 2014-04-24 19:48 - 00000000 ____D () C:\ComboFix
2014-04-24 20:13 - 2014-04-24 19:47 - 00000000 ____D () C:\Windows\erdnt
2014-04-24 20:12 - 2014-04-23 23:58 - 00001844 _____ () C:\Windows\PFRO.log
2014-04-24 20:12 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-24 19:44 - 2014-04-24 19:44 - 05196870 ____R (Swearware) C:\Users\GrenSo\Desktop\ComboFix.exe
2014-04-24 19:42 - 2014-04-23 19:24 - 02061824 _____ (Farbar) C:\Users\GrenSo\Desktop\FRST64.exe
2014-04-24 19:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-24 18:59 - 2012-09-16 22:32 - 00000000 ____D () C:\ProgramData\DivX
2014-04-24 18:58 - 2012-09-16 22:33 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-24 18:56 - 2012-09-16 22:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-24 00:26 - 2012-09-17 01:59 - 00000000 ____D () C:\Program Files (x86)\AIDA64 Extreme Edition
2014-04-24 00:23 - 2013-04-06 15:44 - 00000000 ____D () C:\Program Files (x86)\Rufus
2014-04-23 23:58 - 2012-09-16 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-23 23:58 - 2012-09-16 18:15 - 00000000 ____D () C:\Program Files\WinRAR
2014-04-23 23:09 - 2014-02-07 14:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-23 20:42 - 2012-09-28 18:47 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hardware
2014-04-23 20:37 - 2012-09-16 21:04 - 00000000 ____D () C:\Program Files\Lx_cats
2014-04-23 18:57 - 2014-04-23 18:57 - 00000000 ____D () C:\Program Files (x86)\TP-LINK
2014-04-23 07:54 - 2014-04-23 07:54 - 05153400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-23 07:54 - 2014-04-23 07:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-23 01:17 - 2014-04-23 01:17 - 00146320 _____ () C:\Users\GrenSo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-23 00:00 - 2012-10-19 19:07 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-04-22 23:58 - 2012-09-28 18:47 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System
2014-04-22 23:36 - 2014-04-22 23:36 - 00000000 _____ () C:\Users\GrenSo\defogger_reenable
2014-04-22 23:36 - 2012-09-16 17:23 - 00000000 ____D () C:\Users\GrenSo
2014-04-22 23:25 - 2012-11-20 20:09 - 00000000 ____D () C:\Program Files (x86)\AnvilBenchmark
2014-04-22 23:04 - 2014-04-22 23:04 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-04-22 23:04 - 2014-04-22 23:04 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Apple Computer
2014-04-22 23:01 - 2014-04-22 23:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-21 20:56 - 2012-09-16 19:00 - 00000000 ____D () C:\Users\GrenSo\AppData\Local\Adobe
2014-04-21 20:09 - 2012-09-19 21:14 - 00000000 ____D () C:\Program Files (x86)\XMedia Recode
2014-04-21 19:57 - 2014-04-21 20:07 - 00002122 _____ () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Endpoint Antivirus.lnk
2014-04-21 19:47 - 2014-01-17 19:50 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\ProductData
2014-04-21 19:47 - 2013-10-06 20:30 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\vlc
2014-04-21 19:47 - 2013-09-27 20:00 - 00000000 ____D () C:\Program Files (x86)\AntiLogger
2014-04-21 19:47 - 2013-02-08 20:15 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\QFX Software
2014-04-21 19:47 - 2013-02-08 20:15 - 00000000 ____D () C:\ProgramData\QFX Software
2014-04-21 19:47 - 2013-01-11 23:56 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-21 19:47 - 2012-09-16 19:49 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\TeraCopy
2014-04-21 19:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-18 21:08 - 2014-04-18 21:08 - 00000000 ____D () C:\ProgramData\ESET
2014-04-18 21:08 - 2014-04-18 21:08 - 00000000 ____D () C:\Program Files\ESET
2014-04-18 20:47 - 2012-09-16 18:22 - 00000000 ____D () C:\ProgramData\Razer
2014-04-18 20:46 - 2012-09-18 21:49 - 00000000 ____D () C:\Program Files (x86)\Alternative Flash Player Auto-Updater
2014-04-18 20:41 - 2014-04-18 20:41 - 00000000 __SHD () C:\Users\GrenSo\AppData\Local\EmieUserList
2014-04-18 20:41 - 2014-04-18 20:41 - 00000000 __SHD () C:\Users\GrenSo\AppData\Local\EmieSiteList
2014-04-18 20:18 - 2012-09-16 18:58 - 00001485 _____ () C:\Users\GrenSo\AppData\Roaming\Network Meter_Settings.ini
2014-04-18 19:18 - 2014-04-18 19:18 - 00901848 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-04-18 19:18 - 2014-04-18 19:18 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-04-18 19:18 - 2012-09-16 18:17 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-04-18 19:05 - 2013-11-12 23:10 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-04-18 19:04 - 2014-04-18 19:04 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-04-18 19:04 - 2014-04-18 19:04 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-04-18 19:04 - 2014-04-18 19:04 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-04-18 19:04 - 2014-04-18 19:04 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-04-18 19:01 - 2012-11-23 21:14 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\TeamViewer
2014-04-18 19:01 - 2012-09-28 19:09 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Editoren
2014-04-18 19:01 - 2012-09-28 18:47 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bildbearbeitung
2014-04-18 19:01 - 2012-09-28 18:46 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download
2014-04-18 19:01 - 2012-09-19 21:26 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3D Animation
2014-04-18 17:57 - 2012-09-16 20:26 - 00000000 ____D () C:\Users\GrenSo\.VirtualBox
2014-04-18 17:50 - 2012-10-14 12:42 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6
2014-04-18 17:44 - 2014-04-18 17:44 - 00002181 _____ () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-18 17:42 - 2013-02-12 19:48 - 00000000 ____D () C:\Program Files\FreeFixer
2014-04-18 17:41 - 2012-12-27 15:43 - 00000000 ____D () C:\ProgramData\IObit
2014-04-18 17:37 - 2013-10-18 11:59 - 00000000 ____D () C:\Program Files\Wireshark
2014-04-18 17:37 - 2012-09-16 17:23 - 00000000 ___RD () C:\Users\GrenSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 17:35 - 2014-04-18 17:35 - 00000000 __HDC () C:\ProgramData\{727C5CC8-3A5E-4517-BA8B-35A93F9B2EBD}
2014-04-18 17:35 - 2013-09-27 20:00 - 00049752 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\AntiLog64.sys
2014-04-18 17:33 - 2014-03-20 00:05 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-18 17:33 - 2014-01-15 01:54 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-18 17:33 - 2014-01-15 01:54 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-18 17:33 - 2014-01-15 01:54 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-04-18 17:32 - 2012-09-24 11:09 - 00000000 ____D () C:\Program Files\Adobe
2014-04-18 17:29 - 2013-09-13 20:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-18 17:29 - 2013-03-05 09:11 - 00000000 ____D () C:\Program Files\Java
2014-04-18 17:29 - 2013-01-14 01:01 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-18 17:28 - 2014-04-18 17:28 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-18 17:28 - 2014-04-18 17:28 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-18 17:26 - 2012-09-16 22:57 - 00000000 ____D () C:\Program Files (x86)\EditPlus 3
2014-04-18 17:23 - 2014-01-10 19:54 - 00000000 ____D () C:\Program Files (x86)\AppRemover
2014-04-18 17:22 - 2013-04-20 10:58 - 00000000 ____D () C:\Program Files (x86)\UnHackMe
2014-04-18 17:20 - 2012-09-26 20:50 - 00000000 ____D () C:\Program Files\Network Scanner
2014-04-18 17:18 - 2012-09-24 11:09 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-04-18 17:18 - 2012-09-17 20:02 - 00000000 ____D () C:\Program Files (x86)\Passbild-Generator
2014-04-18 17:17 - 2012-09-16 23:05 - 00000000 ____D () C:\Program Files (x86)\XnView
2014-04-18 17:15 - 2013-07-02 20:48 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-04-18 17:15 - 2012-09-16 19:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-04-18 17:15 - 2012-09-16 18:35 - 00000000 ____D () C:\Users\GrenSo\AppData\Roaming\Adobe
2014-04-18 17:14 - 2013-11-03 12:34 - 00000000 ____D () C:\Program Files\CrystalDiskInfo
2014-04-18 17:13 - 2013-03-09 15:59 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-18 17:13 - 2013-03-09 15:59 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-18 16:48 - 2014-04-18 16:51 - 00000513 _____ () C:\Users\GrenSo\Documents\indexfile.txt
2014-04-18 14:03 - 2014-02-09 20:32 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-18 14:03 - 2014-02-09 20:32 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-18 14:03 - 2012-09-17 19:04 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-17 22:47 - 2013-05-24 20:01 - 00000000 ____D () C:\ProgramData\Vodafone
2014-04-17 22:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-17 21:52 - 2013-07-09 20:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-17 21:46 - 2012-09-16 20:01 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-17 21:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-16 05:02 - 2014-04-16 05:02 - 00354656 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-04-14 04:24 - 2014-04-22 23:01 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-04-22 23:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\GrenSo\IP_Log_Data.js
C:\Users\GrenSo\Network_Meter_Data.js


Some content of TEMP:
====================
C:\Users\GrenSo\AppData\Local\Temp\NEventMessages.dll
C:\Users\GrenSo\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\GrenSo\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-24 00:15

==================== End Of Log ============================
         

--- --- ---



Derzeit hab ich mit dem Aufruf von Webseite keine Probleme mehr bzw. hab bisher nicht wieder dieses ungewöhnliche Verhalten feststellen können.