Giveaway Winnerseveryweek.com los werden!

LordKeksmann · 23.09.2014, 19:37

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 23.09.2014
Suchlauf-Zeit: 20:04:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.23.08
Rootkit Datenbank: v2014.09.19.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Felix

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 361509
Verstrichene Zeit: 9 Min, 26 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\MQqIExEFNHW.exe, 2404, , [a4e1f3fcb4c7f93db896ab1968999868]

Module: 1
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\dat\eVaZIIP.dll, , [295cdd122457c76fdc1eab53e51f9b65], 

Registrierungsschlüssel: 3
PUP.Optional.InstaShare.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MQqIExEFNHW, , [a4e1f3fcb4c7f93db896ab1968999868], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [0c79ba354b3072c42a3e1d74719131cf], 
PUP.Optional.InstaShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InstaShare, , [daab7d72fa81f442c08e00c4b051728e], 

Registrierungswerte: 1
PUP.Optional.AdLyrics.A, HKU\S-1-5-21-3303595683-2564122614-857300725-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|blyrics@be-lyrics.net, C:\Program Files (x86)\bLyrics\116.xpi, , [8afb58970972a78fdd8344340103fb05]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 1
PUP.Optional.InstaShare.A, C:\Users\Felix\AppData\Local\InstaShare, , [295cf1fe03780036fb897d891fe4fd03], 

Dateien: 6
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\MQqIExEFNHW.exe, , [a4e1f3fcb4c7f93db896ab1968999868], 
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\dat\eVaZIIP.dll, , [295cdd122457c76fdc1eab53e51f9b65], 
PUP.Optional.InstaShare.A, C:\ProgramData\InstaShare\uninstall.exe, , [daab7d72fa81f442c08e00c4b051728e], 
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\dat\kLriqpdbFw.exe, , [93f2ab44ff7c39fd50feac180ef3d927], 
PUP.Optional.InstaShare.A, C:\ProgramData\ercKQlgoeR\dat\sahlHZZ.exe, , [f98c30bfde9d4aeced61e5dfe71a649c], 
PUP.Optional.InstaShare.A, C:\Users\Felix\AppData\Local\InstaShare\data2.dat, , [295cf1fe03780036fb897d891fe4fd03], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 23/09/2014 um 20:20:29
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Felix - FELIX-PC
# Gestartet von : C:\Users\Felix\Desktop\AdwCleaner_3.310.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Browser

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.2 (x86 de)

[ Datei : C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\0xq35cv6.default-1400692676604\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [25681 octets] - [21/09/2014 10:46:29]
AdwCleaner[R1].txt - [5150 octets] - [21/09/2014 12:03:33]
AdwCleaner[R2].txt - [1227 octets] - [21/09/2014 13:33:45]
AdwCleaner[R3].txt - [1328 octets] - [23/09/2014 20:19:20]
AdwCleaner[S0].txt - [23624 octets] - [21/09/2014 10:49:46]
AdwCleaner[S1].txt - [4777 octets] - [21/09/2014 12:04:53]
AdwCleaner[S2].txt - [1236 octets] - [23/09/2014 20:20:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1296 octets] ##########

Code:

ATTFilter

Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.0 (09.22.2014:1)
OS: Windows 7 Home Premium x64
Ran by Felix on 23.09.2014 at 20:24:02,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update webget
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util webget
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\LyricsMonkeyUpdater_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\LyricsMonkeyUpdater_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\LyricsPal_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\LyricsPal_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\LyricsMonkeyUpdater_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\LyricsMonkeyUpdater_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\LyricsPal_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\LyricsPal_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{486E707A-9C75-4D92-BD66-F6D15B75178B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D2602FFB-CAF0-4794-B770-315C9B719223}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{0365D0C3-9619-420D-8254-A67CF7F86F75}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{0BEB6E2F-DFFB-4CFE-856E-CDE273A75EB1}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{1240A47C-CDAA-461F-90A5-0E6583C9E6CD}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{15EB0E88-2C34-407F-8256-81D21E0A9F12}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{205115A6-7E6D-491B-8B7C-7B4C7190E925}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{3AB3C2AF-9540-4624-90BC-54E0443E2921}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{4037B1A2-B3B0-4B0F-B312-81F0645AD5E7}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{40E22D4E-7E89-4EB5-97AD-6ACE45686564}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{4843A562-5603-440B-BDB8-7949E96E0431}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{68850CC8-F2CF-49DA-AB76-BB72BB2F7312}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{9751A532-F60F-4B94-807D-EDBAA39FA955}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{9A3ACC98-D196-4ECD-A293-9CDA063A4F5A}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{B92914DB-F3FF-4FF4-B7B1-E2C6C459B6FA}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{B9FF17D6-CA90-4663-BF6B-8E9AFB51FBC8}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{C09AF8AE-4051-48BC-AD8B-102E37E83B16}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{D25A0A4A-5D2F-4DAD-A34E-8CF52E133405}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{DF93B398-6A7A-450E-B456-82944EB3D2A5}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{E356D358-C229-431D-A2F1-4AEB5223AF1E}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{F13B00D4-EE15-4D11-8892-768389AFA307}
Successfully deleted: [Empty Folder] C:\Users\Felix\appdata\local\{F94A7008-9E13-4E12-AA4B-43B0E71B68F6}



~~~ FireFox

Emptied folder: C:\Users\Felix\AppData\Roaming\mozilla\firefox\profiles\0xq35cv6.default-1400692676604\minidumps [8 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.09.2014 at 20:27:06,81
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-09-2014
Ran by Felix (administrator) on FELIX-PC on 23-09-2014 20:30:46
Running from C:\Users\Felix\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\GIGABYTE\EasySaver\essvr.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
(Akamai Technologies, Inc.) C:\Users\Felix\AppData\Local\Akamai\netsession_win.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
(Akamai Technologies, Inc.) C:\Users\Felix\AppData\Local\Akamai\netsession_win.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint II\SetPointII.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\avastui.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LGDCore] => C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [3036944 2007-07-18] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] => C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2191632 2007-07-18] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-02-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-3303595683-2564122614-857300725-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2010-08-25] (AMD)
HKU\S-1-5-21-3303595683-2564122614-857300725-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Felix\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SetPointII.lnk
ShortcutTarget: SetPointII.lnk -> C:\Program Files\Logitech\SetPoint II\SetPointII.exe (Logitech Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Felix\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:55304;https=127.0.0.1:55304
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - 8D0AC6577A4F416B9778D359C9F9A8CB URL = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=81993083-06cf-469e-a758-c06d6bb4425b&searchtype=ds&q={searchTerms}&installDate=03/06/2013
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\0xq35cv6.default-1400692676604
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\0xq35cv6.default-1400692676604\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-07-29]
FF Extension: Adblock Plus - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\0xq35cv6.default-1400692676604\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-21]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-05-14]

Chrome: 
=======
CHR HomePage: Default -> C452D265D4CA69F1E605DF7684612C3215341EAA4571004FF10C0B88570D234C
CHR DefaultSearchKeyword: Default -> 67CAA63DF8C05C54D9783D2DE4158AA3669739690C24F340EFE97D9A6D614167
CHR DefaultSearchURL: Default -> EE0643793A77402CED50C3CFC348C1EFD53D302AF50EEFF681D4760B1E4D80D0
CHR Profile: C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-08]
CHR Extension: (Google Drive) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-08]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-09]
CHR Extension: (YouTube) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-08]
CHR Extension: (Google Search) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-08]
CHR Extension: (avast! Online Security) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-08]
CHR Extension: (Google Wallet) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-08]
CHR Extension: (Gmail) - C:\Users\Felix\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-08]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-02-23] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-07-04] (AVAST Software)
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-08-01] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [418312 2014-08-01] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4330168 2011-05-11] (INCA Internet Co., Ltd.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-05-10] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-04] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [19600 2012-08-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-04] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-04] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-05-29] ()
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-05-14] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-05-29] ()
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\Program Files\gPotato.eu\FlyFF\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-23 20:30 - 2014-09-23 20:30 - 00000000 ____D () C:\Users\Felix\Downloads\FRST-OlderVersion
2014-09-23 20:27 - 2014-09-23 20:27 - 00004346 _____ () C:\Users\Felix\Desktop\JRT.txt
2014-09-23 20:23 - 2014-09-23 20:23 - 01024790 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2014-09-23 20:23 - 2014-09-23 20:23 - 00000000 ____D () C:\Windows\ERUNT
2014-09-23 20:21 - 2014-09-23 20:21 - 00001376 _____ () C:\Users\Felix\Desktop\AdwCleaner[S2].txt
2014-09-23 20:18 - 2014-09-23 20:18 - 01373475 _____ () C:\Users\Felix\Desktop\AdwCleaner_3.310.exe
2014-09-23 20:14 - 2014-09-23 20:14 - 00002639 _____ () C:\Users\Felix\Desktop\mbam.txt
2014-09-23 20:03 - 2014-09-23 20:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-23 20:03 - 2014-09-23 20:03 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-23 20:03 - 2014-09-23 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-23 20:03 - 2014-09-23 20:03 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-23 20:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-23 20:03 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-23 20:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-23 20:01 - 2014-09-23 20:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Felix\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-09-22 16:14 - 2014-09-22 16:14 - 00022790 _____ () C:\ComboFix.txt
2014-09-22 16:03 - 2014-09-22 16:03 - 05579290 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2014-09-22 16:00 - 2014-09-22 16:14 - 00000000 ____D () C:\Qoobox
2014-09-22 16:00 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-22 16:00 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-22 16:00 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-22 16:00 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-22 16:00 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-22 16:00 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-22 16:00 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-22 16:00 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-22 15:59 - 2014-09-22 16:13 - 00000000 ____D () C:\Windows\erdnt
2014-09-22 15:57 - 2014-09-23 20:21 - 00003136 _____ () C:\Windows\PFRO.log
2014-09-21 16:04 - 2014-09-21 16:04 - 00040171 _____ () C:\Users\Felix\Downloads\Addition.txt
2014-09-21 16:03 - 2014-09-23 20:30 - 00017778 _____ () C:\Users\Felix\Downloads\FRST.txt
2014-09-21 16:03 - 2014-09-23 20:30 - 00000000 ____D () C:\FRST
2014-09-21 16:02 - 2014-09-23 20:30 - 02106368 _____ (Farbar) C:\Users\Felix\Downloads\FRST64.exe
2014-09-21 16:02 - 2014-09-23 20:21 - 00000448 _____ () C:\Windows\setupact.log
2014-09-21 16:02 - 2014-09-21 16:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-21 14:04 - 2014-09-21 14:04 - 00014040 _____ () C:\Users\Felix\Documents\cc_20140921_140423.reg
2014-09-21 12:11 - 2014-09-21 12:11 - 00002218 _____ () C:\Users\Felix\Desktop\SpyHunter.lnk
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\sh4ldr
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 _____ () C:\autoexec.bat
2014-09-21 12:10 - 2014-09-21 12:11 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-09-21 12:09 - 2014-09-21 12:09 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Felix\Downloads\sh-remover.exe
2014-09-21 12:07 - 2014-09-21 12:07 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-21 12:07 - 2014-09-21 12:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-21 12:02 - 2014-09-21 12:02 - 00026108 _____ () C:\Users\Felix\Documents\cc_20140921_120241.reg
2014-09-21 11:59 - 2014-09-21 11:59 - 00027572 _____ () C:\Users\Felix\Documents\cc_20140921_115940.reg
2014-09-21 11:54 - 2014-09-21 12:07 - 00000000 ____D () C:\Program Files (x86)\Firefox
2014-09-21 11:51 - 2014-09-21 11:51 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2 (2).exe
2014-09-21 11:48 - 2014-09-21 11:49 - 00000000 ____D () C:\Users\Felix\Desktop\DXtory
2014-09-21 11:44 - 2014-09-21 11:44 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2 (1).exe
2014-09-21 11:41 - 2014-09-21 11:41 - 00712280 _____ () C:\Users\Felix\Downloads\FirefoxSetup (1).exe
2014-09-21 11:22 - 2014-09-21 13:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-21 11:22 - 2014-09-21 12:07 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-21 11:21 - 2014-09-21 11:21 - 00719520 _____ ( ) C:\Users\Felix\Downloads\FirefoxSetup.exe
2014-09-21 11:20 - 2014-09-21 11:20 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2.exe
2014-09-21 10:47 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-21 10:46 - 2014-09-23 20:20 - 00000000 ____D () C:\AdwCleaner
2014-09-21 10:39 - 2014-09-21 10:39 - 00019940 _____ () C:\Users\Felix\Documents\cc_20140921_103859.reg
2014-09-21 09:36 - 2014-09-21 09:36 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2014-09-21 09:36 - 2014-09-21 09:36 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe Mini Bridge CS5
2014-09-21 09:23 - 2014-09-21 09:23 - 00003502 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Felix-PC-Felix
2014-09-21 09:22 - 2014-09-21 09:35 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-09-21 08:59 - 2014-09-23 20:16 - 00000000 ____D () C:\ProgramData\ercKQlgoeR
2014-09-21 08:59 - 2014-09-23 20:14 - 00000000 ____D () C:\ProgramData\InstaShare
2014-09-21 08:59 - 2014-09-21 09:11 - 1498834686 _____ () C:\Users\Felix\Downloads\226591-658829-adobe-photoshop-cs5.zip
2014-09-19 23:47 - 2014-09-23 20:14 - 00000000 ____D () C:\Windows\Sun
2014-09-16 19:30 - 2014-09-16 19:30 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nvu
2014-09-16 19:26 - 2014-09-16 19:26 - 00000000 ____D () C:\Users\Felix\Desktop\NVU
2014-09-11 23:55 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 23:55 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 23:55 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 23:55 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 23:55 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 23:55 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 23:55 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 23:55 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 23:55 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 23:55 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 23:55 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 23:55 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 23:55 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 23:55 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 23:55 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 23:55 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 23:55 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 23:55 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 23:55 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 23:55 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 23:55 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 23:55 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 23:55 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 23:55 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 23:55 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 23:55 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 23:55 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 23:55 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 23:55 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 23:55 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 23:55 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 23:55 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 23:55 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 23:55 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 23:55 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 23:55 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 23:55 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 23:55 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 23:55 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 23:55 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 23:55 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 23:55 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 23:55 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 23:55 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 23:55 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 23:55 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 23:55 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 23:55 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 23:55 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 23:55 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 23:55 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 23:55 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 23:55 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 23:55 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-11 23:55 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 23:55 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 23:52 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 23:52 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-11 22:31 - 2014-09-21 09:10 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nitro PDF
2014-09-11 17:07 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 17:07 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 17:07 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 17:07 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 17:07 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 17:07 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 17:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 17:07 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 17:07 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-11 17:07 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 17:07 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 17:31 - 2014-09-10 17:31 - 00001896 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
2014-09-10 17:31 - 2014-09-10 17:31 - 00001884 _____ () C:\Users\Public\Desktop\Nitro Pro 9.lnk
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Downloaded Installations
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\ProgramData\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files (x86)\Nitro
2014-09-10 17:31 - 2014-08-01 15:02 - 00029704 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon9.dll
2014-09-10 17:31 - 2014-08-01 15:02 - 00017928 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui9.dll
2014-09-10 17:29 - 2014-09-10 17:29 - 01655704 _____ (Nitro) C:\Users\Felix\Downloads\nitro_pro9.exe
2014-08-28 10:06 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 10:06 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 10:06 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-23 20:30 - 2014-09-23 20:30 - 00000000 ____D () C:\Users\Felix\Downloads\FRST-OlderVersion
2014-09-23 20:30 - 2014-09-21 16:03 - 00017778 _____ () C:\Users\Felix\Downloads\FRST.txt
2014-09-23 20:30 - 2014-09-21 16:03 - 00000000 ____D () C:\FRST
2014-09-23 20:30 - 2014-09-21 16:02 - 02106368 _____ (Farbar) C:\Users\Felix\Downloads\FRST64.exe
2014-09-23 20:28 - 2009-07-14 19:58 - 08845184 _____ () C:\Windows\system32\perfh007.dat
2014-09-23 20:28 - 2009-07-14 19:58 - 02689408 _____ () C:\Windows\system32\perfc007.dat
2014-09-23 20:28 - 2009-07-14 07:13 - 00006456 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-23 20:28 - 2009-07-14 06:45 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-23 20:28 - 2009-07-14 06:45 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-23 20:27 - 2014-09-23 20:27 - 00004346 _____ () C:\Users\Felix\Desktop\JRT.txt
2014-09-23 20:23 - 2014-09-23 20:23 - 01024790 _____ (Thisisu) C:\Users\Felix\Desktop\JRT.exe
2014-09-23 20:23 - 2014-09-23 20:23 - 00000000 ____D () C:\Windows\ERUNT
2014-09-23 20:21 - 2014-09-23 20:21 - 00001376 _____ () C:\Users\Felix\Desktop\AdwCleaner[S2].txt
2014-09-23 20:21 - 2014-09-22 15:57 - 00003136 _____ () C:\Windows\PFRO.log
2014-09-23 20:21 - 2014-09-21 16:02 - 00000448 _____ () C:\Windows\setupact.log
2014-09-23 20:21 - 2013-12-08 02:05 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-23 20:21 - 2013-04-01 10:53 - 00000146 _____ () C:\service.log
2014-09-23 20:21 - 2013-04-01 10:49 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-09-23 20:21 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-23 20:20 - 2014-09-21 10:46 - 00000000 ____D () C:\AdwCleaner
2014-09-23 20:20 - 2014-01-07 20:39 - 01470889 _____ () C:\Windows\WindowsUpdate.log
2014-09-23 20:18 - 2014-09-23 20:18 - 01373475 _____ () C:\Users\Felix\Desktop\AdwCleaner_3.310.exe
2014-09-23 20:16 - 2014-09-21 08:59 - 00000000 ____D () C:\ProgramData\ercKQlgoeR
2014-09-23 20:16 - 2014-09-19 23:47 - 00000000 ____D () C:\Windows\Sun
2014-09-23 20:14 - 2014-09-23 20:14 - 00002639 _____ () C:\Users\Felix\Desktop\mbam.txt
2014-09-23 20:14 - 2014-09-21 08:59 - 00000000 ____D () C:\ProgramData\InstaShare
2014-09-23 20:03 - 2014-09-23 20:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-23 20:03 - 2014-09-23 20:03 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-23 20:03 - 2014-09-23 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-23 20:03 - 2014-09-23 20:03 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-23 20:02 - 2013-04-02 13:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-23 20:01 - 2014-09-23 20:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Felix\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-09-23 19:48 - 2013-12-08 02:05 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-23 18:27 - 2011-10-03 15:48 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-23 13:37 - 2012-08-26 13:04 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-09-23 13:36 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-22 16:14 - 2014-09-22 16:14 - 00022790 _____ () C:\ComboFix.txt
2014-09-22 16:14 - 2014-09-22 16:00 - 00000000 ____D () C:\Qoobox
2014-09-22 16:13 - 2014-09-22 15:59 - 00000000 ____D () C:\Windows\erdnt
2014-09-22 16:13 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-09-22 16:03 - 2014-09-22 16:03 - 05579290 ____R (Swearware) C:\Users\Felix\Desktop\ComboFix.exe
2014-09-22 15:57 - 2011-06-11 11:04 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-21 16:04 - 2014-09-21 16:04 - 00040171 _____ () C:\Users\Felix\Downloads\Addition.txt
2014-09-21 16:02 - 2014-09-21 16:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-21 14:04 - 2014-09-21 14:04 - 00014040 _____ () C:\Users\Felix\Documents\cc_20140921_140423.reg
2014-09-21 13:49 - 2014-09-21 11:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-21 13:45 - 2011-06-11 11:03 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-09-21 12:11 - 2014-09-21 12:11 - 00002218 _____ () C:\Users\Felix\Desktop\SpyHunter.lnk
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\sh4ldr
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-09-21 12:11 - 2014-09-21 12:11 - 00000000 _____ () C:\autoexec.bat
2014-09-21 12:11 - 2014-09-21 12:10 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-09-21 12:09 - 2014-09-21 12:09 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Felix\Downloads\sh-remover.exe
2014-09-21 12:07 - 2014-09-21 12:07 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-21 12:07 - 2014-09-21 12:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-21 12:07 - 2014-09-21 11:54 - 00000000 ____D () C:\Program Files (x86)\Firefox
2014-09-21 12:07 - 2014-09-21 11:22 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-21 12:02 - 2014-09-21 12:02 - 00026108 _____ () C:\Users\Felix\Documents\cc_20140921_120241.reg
2014-09-21 11:59 - 2014-09-21 11:59 - 00027572 _____ () C:\Users\Felix\Documents\cc_20140921_115940.reg
2014-09-21 11:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-21 11:51 - 2014-09-21 11:51 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2 (2).exe
2014-09-21 11:49 - 2014-09-21 11:48 - 00000000 ____D () C:\Users\Felix\Desktop\DXtory
2014-09-21 11:44 - 2014-09-21 11:44 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2 (1).exe
2014-09-21 11:43 - 2011-06-18 00:03 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-21 11:41 - 2014-09-21 11:41 - 00712280 _____ () C:\Users\Felix\Downloads\FirefoxSetup (1).exe
2014-09-21 11:32 - 2014-08-05 14:20 - 00000000 ____D () C:\Users\Felix\Desktop\Red Faction
2014-09-21 11:32 - 2009-07-14 04:34 - 00000580 _____ () C:\Windows\win.ini
2014-09-21 11:31 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup
2014-09-21 11:21 - 2014-09-21 11:21 - 00719520 _____ ( ) C:\Users\Felix\Downloads\FirefoxSetup.exe
2014-09-21 11:20 - 2014-09-21 11:20 - 00244392 _____ () C:\Users\Felix\Downloads\Firefox Setup Stub 32.0.2.exe
2014-09-21 10:51 - 2009-07-14 06:45 - 05050624 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-21 10:49 - 2011-03-18 17:27 - 00000000 ____D () C:\ProgramData\ICQ
2014-09-21 10:39 - 2014-09-21 10:39 - 00019940 _____ () C:\Users\Felix\Documents\cc_20140921_103859.reg
2014-09-21 10:38 - 2011-01-24 13:42 - 00000000 ____D () C:\Windows\Minidump
2014-09-21 09:42 - 2011-01-16 20:53 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe
2014-09-21 09:36 - 2014-09-21 09:36 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2014-09-21 09:36 - 2014-09-21 09:36 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe Mini Bridge CS5
2014-09-21 09:35 - 2014-09-21 09:22 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-09-21 09:24 - 2011-06-11 10:58 - 00000000 ____D () C:\Users\Felix\AppData\Local\Adobe
2014-09-21 09:23 - 2014-09-21 09:23 - 00003502 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Felix-PC-Felix
2014-09-21 09:23 - 2011-01-17 19:02 - 00149320 _____ () C:\Users\Felix\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-21 09:11 - 2014-09-21 08:59 - 1498834686 _____ () C:\Users\Felix\Downloads\226591-658829-adobe-photoshop-cs5.zip
2014-09-21 09:10 - 2014-09-11 22:31 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nitro PDF
2014-09-21 08:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2014-09-20 00:32 - 2013-12-10 13:43 - 00000000 ____D () C:\ProgramData\Origin
2014-09-20 00:31 - 2011-01-17 16:39 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Skype
2014-09-16 19:30 - 2014-09-16 19:30 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nvu
2014-09-16 19:26 - 2014-09-16 19:26 - 00000000 ____D () C:\Users\Felix\Desktop\NVU
2014-09-15 09:06 - 2011-01-16 13:45 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-13 15:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-12 20:33 - 2014-08-13 23:15 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\.minecraft
2014-09-11 23:58 - 2011-12-11 18:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-11 23:54 - 2013-07-28 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 23:52 - 2014-05-06 23:57 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-11 23:52 - 2011-01-16 23:35 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 17:31 - 2014-09-10 17:31 - 00001896 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
2014-09-10 17:31 - 2014-09-10 17:31 - 00001884 _____ () C:\Users\Public\Desktop\Nitro Pro 9.lnk
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Downloaded Installations
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\ProgramData\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2014-09-10 17:31 - 2014-09-10 17:31 - 00000000 ____D () C:\Program Files (x86)\Nitro
2014-09-10 17:31 - 2013-07-14 09:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-10 17:29 - 2014-09-10 17:29 - 01655704 _____ (Nitro) C:\Users\Felix\Downloads\nitro_pro9.exe
2014-09-10 14:02 - 2013-04-02 13:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 14:02 - 2012-09-05 21:29 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 14:02 - 2011-06-11 10:48 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-06 18:58 - 2012-12-16 13:47 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\NetSpeedMonitor
2014-09-05 04:10 - 2014-09-11 17:07 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-11 17:07 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 21:24 - 2014-08-14 00:42 - 00000000 ____D () C:\Users\Felix\Desktop\Minecraft-Server
2014-09-03 10:14 - 2014-08-14 00:39 - 00000185 _____ () C:\Users\Felix\Downloads\eula.txt

Some content of TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-16 14:40

==================== End Of Log ============================

--- --- ---

Alles in der Reihenfolge wie angefragt

Giveaway Winnerseveryweek.com los werden!

Plagegeister aller Art und deren Bekämpfung: Giveaway Winnerseveryweek.com los werden!

Giveaway Winnerseveryweek.com los werden!

Ähnliche Themen: Giveaway Winnerseveryweek.com los werden!