Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Windows 7 Booten bricht ab (https://www.trojaner-board.de/149048-windows-7-booten-bricht-ab.html)

deeprybka 04.02.2014 22:01
Hallo Ralf!
Freut mich, dass Dein PC wieder geht!
Auch wenn Dir meine Hilfe nicht viel genützt hat... :(

Mach jetzt bitte mal ein FRST Log. Das schaut sich dann Cosinus an.
Er wird dann auch ggf. weitere Schritte mit Dir durchgehen. Das darf ich als Student noch nicht mit Dir alleine. Wenn Du insgesamt am Ende zufrieden warst, kannst Du hier Deine Meinung sagen und evtl. das Board unterstützen.

Alles Gute!

:daumenhoc

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Billunder 05.02.2014 01:18
Gut, hier die FRST Datei:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-02-2014
Ran by **** (administrator) on HEIM-PC on 05-02-2014 01:11:52
Running from C:\Users\****\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Infowatch) C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Windows\System32\XSrvSetup.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared Files\brs.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(ArcSoft, Inc.) C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\klwtblfs.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation)
HKLM\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [RemoteControl8] - C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-07-16] (CyberLink Corp.)
HKLM\...\Run: [PDVD8LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-08-28] (cyberlink)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1246544 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Eraser] - C:\Program Files\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\klogon: C:\Windows\system32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\Run: [Video Performer63600.exe] - "C:\Users\****~1\AppData\Local\Temp\Video Performer63600.exe" /XML="C:\Users\****~1\AppData\Local\Temp\B7BA.tmp" /STP=0:2 <===== ATTENTION
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\MountPoints2: {43658060-b806-11df-abb4-806e6f6e6963} - E:\Run.exe

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} -  No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {02CF5479-CEBD-45F5-95D4-2AEFDA04EE89} URL =
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: No Name - {53707962-6F74-2D53-2644-206D7942484F} -  No File
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - No Name - !{62d40876-df18-411f-9d34-a9dd7a197bc5} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.214

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\****\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\****\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox 4.0 Beta 11\firefox.exe

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "hxxp://www.ch-aviation.ch/portal/"
CHR DefaultSearchKeyword: r
CHR DefaultSearchProvider: Web Search
CHR DefaultSearchURL: hxxp://www.google.com
CHR Plugin: (Chrome PDF Viewer) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\pdf.dll ()
CHR Plugin: (Google Gears 0.5.33.0) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\gears.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\gcswf32.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.2.733_0\plugin/npUrlAdvisor.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.2.733_0\plugin/npVKPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.2.733_0\plugin/npABPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\np-mswmp.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin5.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin7.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\****\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Yahoo! activeX Plug-in Bridge) - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
CHR Plugin: (Octoshape Streaming Services) - C:\Users\****\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-06-11]
CHR Extension: (Virtuelle Tastatur) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-06-11]
CHR Extension: (Anti-Banner) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-06-11]
CHR HKLM\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\****\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2013-06-11]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\urladvisor.crx [2012-12-18]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\virtkbd.crx [2012-12-18]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\ab.crx [2012-12-18]
CHR HKCU\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\****\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-12-18]
CHR StartMenuInternet: Google Chrome - C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 JMB36X; C:\Windows\System32\XSrvSetup.exe [65536 2009-08-06] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 McComponentHostService; "C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe" [X]
S2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [X]

==================== Drivers (Whitelisted) ====================

S3 AF9035BDA; C:\Windows\System32\Drivers\AF9035BDA.sys [368000 2010-09-04] (AfaTech                  )
R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26032 2013-06-02] (Wondershare)
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW73.sys [101904 2010-07-15] (ATI Technologies, Inc.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [88632 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [39352 2009-12-14] (Infowatch)
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [99440 2009-10-29] (JMicron Technology Corp.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135984 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13104 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [585560 2013-06-11] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [23856 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19984 2009-11-02] (Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files\CyberLink\PowerDVD8\000.fcl [87536 2009-08-28] (CyberLink Corp.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-05 01:10 - 2014-02-05 01:11 - 00019874 _____ () C:\Users\****\Downloads\FRST.txt
2014-02-05 01:10 - 2014-02-05 01:10 - 01137152 _____ (Farbar) C:\Users\****\Downloads\FRST.exe
2014-02-05 01:08 - 2014-02-05 01:08 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
2014-02-04 20:51 - 2014-02-04 20:51 - 00002182 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-01-31 19:23 - 2014-01-31 19:23 - 00000000 ____D () C:\Windows\system32\%PersonalRootCertificateFolder%
2014-01-31 14:02 - 2014-02-04 11:51 - 00000000 ____D () C:\Program Files\Tweaking.com - Windows Repair
2014-01-31 13:53 - 2014-02-04 11:12 - 00000000 ____D () C:\Users\****\Downloads\tweaking.com_windows_repair_aio
2014-01-31 13:38 - 2014-01-31 13:38 - 02903255 _____ () C:\Users\****\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-31 12:15 - 2014-01-31 12:15 - 00448512 _____ (OldTimer Tools) C:\Users\****\Downloads\TFC.exe
2014-01-30 22:06 - 2014-01-30 22:07 - 00001820 _____ () C:\sc-cleaner.txt
2014-01-30 22:06 - 2014-01-30 22:06 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\****\Downloads\sc-cleaner.exe
2014-01-30 21:41 - 2014-01-30 21:41 - 00013520 ____N () C:\bootsqm.dat
2014-01-30 21:03 - 2014-02-05 01:11 - 00000000 ____D () C:\FRST
2014-01-30 20:58 - 2014-01-30 20:58 - 01166132 _____ () C:\Users\****\Downloads\adwcleaner.exe
2014-01-30 20:42 - 2014-01-30 20:42 - 00006298 _____ () C:\Users\****\Desktop\JRT.txt
2014-01-30 20:39 - 2014-02-04 11:43 - 00000000 ____D () C:\Windows\ERUNT
2014-01-30 20:12 - 2014-01-30 20:12 - 04101441 _____ () C:\Users\****\Downloads\tdsskiller.zip
2014-01-30 19:36 - 2014-01-30 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-30 19:36 - 2014-01-30 19:36 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-30 19:35 - 2014-02-04 11:51 - 00000000 ____D () C:\Users\****\Desktop\mbar
2014-01-30 19:33 - 2014-01-30 19:33 - 00000340 _____ () C:\AdwCleaner[R2].txt
2014-01-30 13:53 - 2014-01-30 13:53 - 01037068 _____ (Thisisu) C:\Users\****\Downloads\JRT.exe
2014-01-30 13:51 - 2014-01-30 13:51 - 12589848 _____ (Malwarebytes Corp.) C:\Users\****\Downloads\mbar-1.07.0.1009.exe
2014-01-30 13:43 - 2014-01-30 13:43 - 00013507 _____ () C:\Users\****\Downloads\MemTest4.zip
2014-01-30 13:39 - 2014-01-30 13:39 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\****\Downloads\tdsskiller.exe
2014-01-30 12:58 - 2014-02-04 23:42 - 00000000 ____D () C:\AdwCleaner
2014-01-30 11:46 - 2014-02-05 01:08 - 00000560 _____ () C:\Windows\setupact.log
2014-01-30 11:46 - 2014-01-30 11:46 - 00109280 _____ () C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-30 11:46 - 2014-01-30 11:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-30 11:45 - 2014-01-31 13:59 - 00001796 _____ () C:\Windows\PFRO.log
2014-01-30 11:45 - 2014-01-30 11:46 - 00408696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 01:27 - 2014-02-04 11:51 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-01-30 01:27 - 2014-01-30 01:27 - 00002147 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-30 01:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2014-01-30 01:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean(27442).exe
2014-01-30 01:26 - 2014-01-30 01:26 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\****\Downloads\spybot-2.2.25.exe
2014-01-30 01:01 - 2014-02-05 01:07 - 00135177 _____ () C:\Windows\WindowsUpdate.log
2014-01-19 21:36 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-19 21:36 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-19 21:36 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-19 21:36 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-19 21:35 - 2014-01-19 21:36 - 00005315 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-10 10:24 - 2014-02-04 11:10 - 00000000 ____D () C:\Users\****\AppData\Local\DVDVideoSoft_Ltd
2014-01-10 10:05 - 2014-01-10 10:26 - 00000000 ____D () C:\Users\****\AppData\Roaming\DVDVideoSoft

==================== One Month Modified Files and Folders =======

2014-02-05 01:11 - 2014-02-05 01:10 - 00019874 _____ () C:\Users\****\Downloads\FRST.txt
2014-02-05 01:11 - 2014-01-30 21:03 - 00000000 ____D () C:\FRST
2014-02-05 01:10 - 2014-02-05 01:10 - 01137152 _____ (Farbar) C:\Users\****\Downloads\FRST.exe
2014-02-05 01:08 - 2014-02-05 01:08 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
2014-02-05 01:08 - 2014-01-30 11:46 - 00000560 _____ () C:\Windows\setupact.log
2014-02-05 01:08 - 2013-04-11 15:46 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-05 01:08 - 2010-11-24 23:21 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 01:08 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 01:07 - 2014-01-30 01:01 - 00135177 _____ () C:\Windows\WindowsUpdate.log
2014-02-05 01:01 - 2012-04-01 09:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-05 00:51 - 2010-11-24 23:21 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-04 23:52 - 2009-07-14 05:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 23:52 - 2009-07-14 05:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-04 23:42 - 2014-01-30 12:58 - 00000000 ____D () C:\AdwCleaner
2014-02-04 22:01 - 2012-04-01 09:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-04 22:01 - 2011-07-10 10:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-04 21:27 - 2010-09-04 10:37 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-04 20:51 - 2014-02-04 20:51 - 00002182 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-02-04 12:08 - 2010-09-04 10:32 - 00000000 ____D () C:\Users\****
2014-02-04 11:57 - 2011-01-14 00:40 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-02-04 11:51 - 2014-01-31 14:02 - 00000000 ____D () C:\Program Files\Tweaking.com - Windows Repair
2014-02-04 11:51 - 2014-01-30 19:35 - 00000000 ____D () C:\Users\****\Desktop\mbar
2014-02-04 11:51 - 2014-01-30 01:27 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-02-04 11:51 - 2013-08-16 12:47 - 00000000 ____D () C:\Program Files\TrueCrypt
2014-02-04 11:51 - 2013-04-12 13:52 - 00000000 ____D () C:\Program Files\Eraser
2014-02-04 11:51 - 2013-04-11 15:50 - 00000000 ___RD () C:\Backup
2014-02-04 11:51 - 2012-08-19 21:13 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-04 11:51 - 2010-12-04 23:41 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-04 11:51 - 2010-12-04 19:29 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-04 11:51 - 2009-07-14 09:56 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-04 11:51 - 2009-07-14 09:56 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-04 11:51 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-02-04 11:51 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\de
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 __RSD () C:\Windows\Media
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\th-TH
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ras
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\icsxml
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\he-IL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\et-EE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\com
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\L2Schemas
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Cursors
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-04 11:50 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\twain_32
2014-02-04 11:50 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\TAPI
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ias
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system
2014-02-04 11:49 - 2013-11-11 12:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\vlc
2014-02-04 11:49 - 2013-05-20 01:36 - 00000000 ___SD () C:\Users\****\Documents\Passwords Database
2014-02-04 11:49 - 2009-07-14 09:57 - 00000000 ____D () C:\Windows\ShellNew
2014-02-04 11:49 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\de-DE
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\addins
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\IME
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\Services
2014-02-04 11:45 - 2011-06-18 17:13 - 00000000 ____D () C:\Windows\system32\SPReview
2014-02-04 11:45 - 2011-06-18 17:12 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-02-04 11:45 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2014-02-04 11:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-04 11:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-02-04 11:44 - 2010-09-04 10:51 - 00000000 ____D () C:\Windows\RaidTool
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\schemas
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\PLA
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-04 11:43 - 2014-01-30 20:39 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 11:43 - 2011-08-13 16:04 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Octoshape Streaming Services
2014-02-04 11:43 - 2011-08-10 18:28 - 00000000 ____D () C:\Users\****\AppData\Local\Microsoft Help
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\picpick
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicPick
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Program Files\PicPick
2014-02-04 11:43 - 2011-04-02 15:25 - 00000000 ____D () C:\Program Files\Veetle
2014-02-04 11:43 - 2011-02-28 17:18 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATCBOX
2014-02-04 11:43 - 2011-02-22 21:50 - 00000000 ____D () C:\Program Files\SopCast
2014-02-04 11:43 - 2010-12-08 10:48 - 00000000 ____D () C:\Program Files\QuickTime
2014-02-04 11:43 - 2010-12-04 23:43 - 00000000 ____D () C:\Windows\de
2014-02-04 11:43 - 2010-12-04 19:34 - 00000000 ____D () C:\Program Files\Microsoft Baseline Security Analyzer 2
2014-02-04 11:43 - 2010-11-24 23:22 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-04 11:43 - 2010-11-24 23:22 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-04 11:43 - 2010-09-04 11:16 - 00000000 ____D () C:\Users\****\AppData\Roaming\ArcSoft
2014-02-04 11:43 - 2010-09-04 11:07 - 00000000 ____D () C:\Windows\CheckSur
2014-02-04 11:43 - 2010-09-04 10:32 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:43 - 2010-09-04 10:32 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:42 - 2013-11-18 01:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox 4.0 Beta 11
2014-02-04 11:42 - 2012-06-17 23:17 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-04 11:42 - 2011-12-06 00:06 - 00000000 ____D () C:\Program Files\dradio-Recorder
2014-02-04 11:42 - 2011-08-10 18:31 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-02-04 11:42 - 2011-06-18 15:48 - 00000000 ____D () C:\Program Files\Common Files\Tobit
2014-02-04 11:42 - 2011-01-13 23:14 - 00000000 ____D () C:\Users\****\AppData\Roaming\K-Meleon
2014-02-04 11:42 - 2011-01-13 23:14 - 00000000 ____D () C:\Program Files\K-Meleon
2014-02-04 11:42 - 2010-09-04 11:56 - 00000000 ____D () C:\Program Files\Common Files\CyberLink
2014-02-04 11:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\XPSViewer
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\winrm
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\WCN
2014-02-04 11:27 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell
2014-02-04 11:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Web
2014-02-04 11:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Vss
2014-02-04 11:26 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\slmgr
2014-02-04 11:26 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spp
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spool
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Speech
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\SMI
2014-02-04 11:25 - 2010-09-04 11:15 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NetworkList
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\MUI
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\IME
2014-02-04 11:21 - 2012-12-19 16:12 - 00000000 ____D () C:\Windows\system32\Adobe
2014-02-04 11:21 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-02-04 11:19 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2014-02-04 11:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\security
2014-02-04 11:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Resources
2014-02-04 11:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-02-04 11:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Globalization
2014-02-04 11:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Branding
2014-02-04 11:12 - 2014-01-31 13:53 - 00000000 ____D () C:\Users\****\Downloads\tweaking.com_windows_repair_aio
2014-02-04 11:12 - 2010-12-04 22:37 - 00000000 ____D () C:\Users\****\SecurityScans
2014-02-04 11:12 - 2010-09-08 19:48 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-04 11:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-02-04 11:11 - 2012-07-11 12:31 - 00000000 ____D () C:\Users\****\AppData\Roaming\Orbit
2014-02-04 11:11 - 2011-12-06 00:06 - 00000000 ____D () C:\Users\****\AppData\Roaming\phonostar GmbH
2014-02-04 11:11 - 2011-08-13 16:04 - 00000000 ____D () C:\Users\****\AppData\Roaming\Octoshape
2014-02-04 11:11 - 2010-12-04 19:29 - 00000000 ____D () C:\Users\****\AppData\Roaming\Malwarebytes
2014-02-04 11:11 - 2010-11-29 23:28 - 00000000 ____D () C:\Users\****\AppData\Roaming\Mozilla
2014-02-04 11:11 - 2010-11-24 23:21 - 00000000 ____D () C:\Users\****\AppData\Roaming\Adobe
2014-02-04 11:11 - 2010-11-24 21:14 - 00000000 ____D () C:\Users\****\AppData\Roaming\Panda Security
2014-02-04 11:11 - 2010-09-04 10:32 - 00000000 ____D () C:\Users\****\AppData\Local\VirtualStore
2014-02-04 11:10 - 2014-01-10 10:24 - 00000000 ____D () C:\Users\****\AppData\Local\DVDVideoSoft_Ltd
2014-02-04 11:10 - 2011-02-28 17:17 - 00000000 ____D () C:\Users\****\AppData\Local\Apps\2.0
2014-02-04 11:10 - 2010-11-24 23:21 - 00000000 ____D () C:\Users\****\AppData\Local\Google
2014-02-04 11:10 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-02-04 11:09 - 2011-09-16 13:26 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-04 11:09 - 2011-08-07 17:56 - 00000000 ____D () C:\Program Files\Xvid
2014-02-04 11:09 - 2011-06-18 15:48 - 00000000 ____D () C:\Program Files\Tobit Radio.fx
2014-02-04 11:09 - 2011-02-17 12:10 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-02-04 11:09 - 2010-12-08 10:48 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-04 11:09 - 2010-12-04 23:42 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-04 11:09 - 2010-12-04 19:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 11:09 - 2010-12-01 01:05 - 00000000 ____D () C:\Program Files\Yahoo!
2014-02-04 11:09 - 2010-11-30 22:04 - 00000000 ____D () C:\ProgramData\Apple
2014-02-04 11:09 - 2010-11-24 23:22 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 11:09 - 2010-09-04 11:16 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-02-04 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-04 11:08 - 2011-07-04 15:13 - 00000000 ____D () C:\Program Files\MSECache
2014-02-04 11:08 - 2010-12-04 23:42 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-02-04 11:08 - 2010-09-04 11:03 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-02-04 11:08 - 2010-09-04 10:52 - 00000000 ____D () C:\Program Files\NEC Electronics
2014-02-04 11:08 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-02-04 11:08 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-02-04 11:07 - 2013-06-11 01:07 - 00000000 ____D () C:\Program Files\Kaspersky Lab
2014-02-04 11:07 - 2012-06-17 14:53 - 00000000 ____D () C:\Program Files\Java
2014-02-04 11:07 - 2011-08-10 18:29 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-02-04 11:07 - 2011-07-04 15:14 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-04 11:07 - 2010-11-24 23:21 - 00000000 ____D () C:\Program Files\Google
2014-02-04 11:07 - 2010-09-04 10:50 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-04 11:07 - 2010-09-04 10:49 - 00000000 ____D () C:\Program Files\Intel
2014-02-04 11:07 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-02-04 11:06 - 2010-12-04 23:02 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-02-04 11:06 - 2010-09-04 11:55 - 00000000 ____D () C:\Program Files\CyberLink
2014-02-04 11:06 - 2010-09-04 10:50 - 00000000 ____D () C:\Program Files\Common Files\postureAgent
2014-02-04 11:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\SpeechEngines
2014-02-04 11:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-02-04 11:05 - 2013-11-22 17:11 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-02-04 11:05 - 2013-06-11 01:07 - 00000000 ____D () C:\Program Files\Common Files\InfoWatch
2014-02-04 11:05 - 2012-04-24 23:06 - 00000000 ____D () C:\Program Files\Ashampoo
2014-02-04 11:05 - 2011-08-10 18:28 - 00000000 __RHD () C:\MSOCache
2014-02-04 11:05 - 2011-06-15 22:08 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-04 11:05 - 2011-06-15 22:08 - 00000000 ____D () C:\Program Files\Adobe
2014-02-04 11:05 - 2010-10-19 09:26 - 00000000 ____D () C:\Program Files\ATI
2014-02-04 11:05 - 2010-10-19 09:25 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-02-04 11:05 - 2010-10-19 09:25 - 00000000 ____D () C:\ATI
2014-02-04 11:05 - 2010-09-04 11:15 - 00000000 ____D () C:\Program Files\Common Files\ArcSoft
2014-02-04 11:05 - 2010-09-04 11:15 - 00000000 ____D () C:\Program Files\ArcSoft
2014-02-04 11:05 - 2010-09-04 10:51 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-02-01 12:10 - 2010-10-15 18:33 - 00000000 ____D () C:\Windows\Minidump
2014-02-01 11:25 - 2013-08-09 12:05 - 00000000 ____D () C:\Users\****\AppData\Roaming\Apowersoft
2014-02-01 11:25 - 2010-09-04 11:17 - 00000000 ____D () C:\Users\****\AppData\Roaming\Macromedia
2014-02-01 11:24 - 2010-11-29 23:28 - 00000000 ____D () C:\Users\****\AppData\Local\Mozilla
2014-02-01 11:17 - 2013-08-09 12:05 - 00000000 ____D () C:\Program Files\Apowersoft
2014-01-31 22:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-01-31 19:23 - 2014-01-31 19:23 - 00000000 ____D () C:\Windows\system32\%PersonalRootCertificateFolder%
2014-01-31 14:11 - 2013-08-14 13:49 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-01-31 13:59 - 2014-01-30 11:45 - 00001796 _____ () C:\Windows\PFRO.log
2014-01-31 13:38 - 2014-01-31 13:38 - 02903255 _____ () C:\Users\****\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-31 12:15 - 2014-01-31 12:15 - 00448512 _____ (OldTimer Tools) C:\Users\****\Downloads\TFC.exe
2014-01-30 22:07 - 2014-01-30 22:06 - 00001820 _____ () C:\sc-cleaner.txt
2014-01-30 22:06 - 2014-01-30 22:06 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\****\Downloads\sc-cleaner.exe
2014-01-30 21:47 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 21:41 - 2014-01-30 21:41 - 00013520 ____N () C:\bootsqm.dat
2014-01-30 20:58 - 2014-01-30 20:58 - 01166132 _____ () C:\Users\****\Downloads\adwcleaner.exe
2014-01-30 20:42 - 2014-01-30 20:42 - 00006298 _____ () C:\Users\****\Desktop\JRT.txt
2014-01-30 20:12 - 2014-01-30 20:12 - 04101441 _____ () C:\Users\****\Downloads\tdsskiller.zip
2014-01-30 19:43 - 2014-01-30 19:36 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-30 19:36 - 2014-01-30 19:36 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-30 19:33 - 2014-01-30 19:33 - 00000340 _____ () C:\AdwCleaner[R2].txt
2014-01-30 13:53 - 2014-01-30 13:53 - 01037068 _____ (Thisisu) C:\Users\****\Downloads\JRT.exe
2014-01-30 13:51 - 2014-01-30 13:51 - 12589848 _____ (Malwarebytes Corp.) C:\Users\****\Downloads\mbar-1.07.0.1009.exe
2014-01-30 13:43 - 2014-01-30 13:43 - 00013507 _____ () C:\Users\****\Downloads\MemTest4.zip
2014-01-30 13:39 - 2014-01-30 13:39 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\****\Downloads\tdsskiller.exe
2014-01-30 11:46 - 2014-01-30 11:46 - 00109280 _____ () C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-30 11:46 - 2014-01-30 11:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-30 11:46 - 2014-01-30 11:45 - 00408696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 04:18 - 2011-01-13 23:14 - 00000000 ____D () C:\Users\****\AppData\Local\K-Meleon
2014-01-30 02:07 - 2010-12-04 19:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-30 01:45 - 2009-07-14 03:05 - 00106412 _____ () C:\Windows\system32\perfc009(27441).dat
2014-01-30 01:27 - 2014-01-30 01:27 - 00002147 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-30 01:26 - 2014-01-30 01:26 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\****\Downloads\spybot-2.2.25.exe
2014-01-20 09:47 - 2010-11-25 13:08 - 00000000 ____D () C:\Users\****\AppData\Local\Adobe
2014-01-19 21:41 - 2013-10-26 08:58 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-19 21:36 - 2014-01-19 21:35 - 00005315 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-10 10:26 - 2014-01-10 10:05 - 00000000 ____D () C:\Users\****\AppData\Roaming\DVDVideoSoft

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 15:04

==================== End Of Log ============================
--- --- ---



und die Additional:

Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-02-2014
Ran by **** at 2014-02-05 01:12:08
Running from C:\Users\****\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky PURE 2.0 (Enabled - Out of date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 2.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky PURE 2.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (Version: 12.0.3.133 - Adobe Systems, Inc.)
ArcSoft TotalMedia 3.5 (Version: 3.5.28.291 - ArcSoft)
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG)
ATCBOXlive! (HKCU Version: 0.2.0.0 - ATCBOX)
ATI Catalyst Install Manager (Version: 3.0.790.0 - ATI Technologies, Inc.)
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2010.0825.2146.37182 - ATI Technologies, Inc.) Hidden
CCC Help English (Version: 2010.0825.2145.37182 - ATI) Hidden
ccc-core-static (Version: 2010.0825.2146.37182 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.0825.2146.37182 - ATI) Hidden
CCleaner (Version: 4.08 - Piriform)
CyberLink BD & 3D Advisor 2.0 (Version:  - )
CyberLink PowerDVD 8 (Version: 8.0.3228 - CyberLink Corp.)
CyberLink PowerDVD 8 (Version: 8.0.3228 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
dradio-Recorder Version 3.02.2 (Version:  - )
Eraser 6.0.10.2620 (Version: 6.0.2620 - The Eraser Project)
Gigabyte Raid Cinfigurer (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Google Chrome (HKCU Version: 8.0.552.237 - Google Inc.)
Google Earth (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Intel(R) Control Center (Version: 1.2.0.1006 - Intel Corporation)
Intel(R) Management Engine Components (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037 - Intel Corporation)
Java 7 Update 51 (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kaspersky PURE 2.0 (Version: 12.0.2.733 - Kaspersky Lab)
Kaspersky PURE 2.0 (Version: 12.0.2.733 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.8 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Baseline Security Analyzer 2.2 (Version: 2.2.2170 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel Viewer (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.17.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.17.0 - NEC Electronics Corporation) Hidden
Octoshape Streaming Services (HKCU Version:  - Octoshape ApS)
PicPick (Version: 3.0.4 - Wiziple software)
QuickShare (Version: 1.6.1.714 - Linkury Inc.) <==== ATTENTION
QuickTime (Version: 7.69.80.9 - Apple Inc.)
Revo Uninstaller 1.92 (Version: 1.92 - VS Revo Group)
SopCast 3.3.2 (Version: 3.3.2 - www.sopcast.com)
Spybot - Search & Destroy (Version: 2.2.25 - Safer-Networking Ltd.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TrueCrypt (Version: 7.1a - TrueCrypt Foundation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2010 (KB2494150) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (Version:  - Microsoft)
Veetle TV (Version: 0.9.19 - Veetle, Inc)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.0.8 (Version: 2.0.8 - VideoLAN)
WDR RadioRecorder (Version:  - Tobit.Software)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (Version: 1.0.0.8 - Microsoft Corp)

==================== Restore Points  =========================

26-01-2014 19:13:59 Windows-Sicherung
30-01-2014 00:03:49 Revo Uninstaller's restore point - Mozilla Firefox 26.0 (x86 de)
30-01-2014 00:06:17 Revo Uninstaller's restore point - Mozilla Firefox 26.0 (x86 de)
30-01-2014 00:13:58 Revo Uninstaller's restore point - Apowersoft kostenloser Bildschirmrekorder V1.2.4
30-01-2014 03:16:05 Revo Uninstaller's restore point - K-Meleon 1.5.4 de-DE (nur entfernen)
31-01-2014 13:12:38 Tweaking.com - Windows Repair

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {32700E9D-CE37-4F7C-8AF0-97207D75FE7D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {41DA2388-66FC-4793-85AF-0526CE9F5979} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {836915BF-C6BF-4B4A-A49C-7568052630B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {AC811728-8193-41E7-BDEA-731B459DE629} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {B456BA6F-3F92-4D62-837D-E33070E8E824} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {BF59ED7E-C37A-4A1F-87F1-6CA41B29278E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {C4267CB0-E1EA-4481-874E-9D808AA3998B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {E00A2E76-4640-4D29-A800-03D5050B6051} - System32\Tasks\RunAsStdUser Task => C:\Program Files\ClickPotatoLite\bin\10.0.701.0\ClickPotatoLiteSA.exe
Task: {E0946C3F-58EB-4595-837A-B4068307327E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-08-30 21:23 - 2012-08-30 21:23 - 00459192 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\dblite.dll
2014-01-30 01:27 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-30 01:27 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2010-09-04 11:15 - 2007-04-19 08:33 - 00035584 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\uPiApi.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2010-09-04 11:15 - 2008-11-26 15:59 - 00131584 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\AbilisWinUsb.dll
2010-09-04 11:15 - 2008-10-22 15:01 - 00200704 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\VendorCmdRW.dll
2010-08-04 14:58 - 2010-08-04 14:58 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-25 20:44 - 2010-08-25 20:44 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-09-04 10:51 - 2009-10-02 12:18 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-01-14 00:40 - 2011-01-08 04:35 - 04049976 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\pdf.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 01475128 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avcodec-52.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00099896 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avutil-50.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00197688 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avformat-52.dll
2014-01-30 01:27 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-01-30 01:27 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-01-30 01:27 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 11:39:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WO6FW.exe, Version: 1.0.0.0, Zeitstempel: 0x4aa86f1c
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000812f
ID des fehlerhaften Prozesses: 0x14e0
Startzeit der fehlerhaften Anwendung: 0xWO6FW.exe0
Pfad der fehlerhaften Anwendung: WO6FW.exe1
Pfad des fehlerhaften Moduls: WO6FW.exe2
Berichtskennung: WO6FW.exe3

Error: (02/04/2014 11:37:57 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WO6FW.exe, Version: 1.0.0.0, Zeitstempel: 0x4aa86f1c
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000812f
ID des fehlerhaften Prozesses: 0xed0
Startzeit der fehlerhaften Anwendung: 0xWO6FW.exe0
Pfad der fehlerhaften Anwendung: WO6FW.exe1
Pfad des fehlerhaften Moduls: WO6FW.exe2
Berichtskennung: WO6FW.exe3

Error: (02/04/2014 08:51:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 0.0.0.0, Zeitstempel: 0x4d27c1b0
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe30
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (02/04/2014 08:36:33 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (02/04/2014 10:59:20 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2014 10:59:16 AM) (Source: Schedule) (User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:59:14 AM) (Source: Wininit) (User: )
Description: Ein kritischer Systemprozess C:\Windows\system32\lsass.exe ist fehlgeschlagen mit den Statuscode 255. Der Computer muss neu gestartet werden.

Error: (02/04/2014 10:57:21 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2014 10:57:19 AM) (Source: Schedule) (User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:57:17 AM) (Source: Wininit) (User: )
Description: Ein kritischer Systemprozess C:\Windows\system32\lsass.exe ist fehlgeschlagen mit den Statuscode 255. Der Computer muss neu gestartet werden.


System errors:
=============
Error: (02/05/2014 01:09:26 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/05/2014 01:09:26 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht.

Error: (02/05/2014 01:08:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/05/2014 01:08:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/05/2014 01:08:55 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (02/05/2014 01:06:54 AM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (02/04/2014 11:45:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/04/2014 00:14:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/04/2014 00:14:19 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht.

Error: (02/04/2014 00:13:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (02/04/2014 11:39:13 PM) (Source: Application Error)(User: )
Description: WO6FW.exe1.0.0.04aa86f1cKERNELBASE.dll6.1.7601.1822951fb10c60eedfade0000812f14e001cf21f9e95b62f1C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\WO6FW.exeC:\Windows\system32\KERNELBASE.dll2b3e3d2e-8ded-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 11:37:57 PM) (Source: Application Error)(User: )
Description: WO6FW.exe1.0.0.04aa86f1cKERNELBASE.dll6.1.7601.1822951fb10c60eedfade0000812fed001cf21f9becbe837C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\WO6FW.exeC:\Windows\system32\KERNELBASE.dllfde24441-8dec-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 08:51:42 PM) (Source: Application Error)(User: )
Description: chrome.exe0.0.0.04d27c1b0unknown0.0.0.000000000c000000500000000e3001cf21e08f2708dfC:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exeunknownc480bc99-8dd5-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 08:36:33 PM) (Source: Windows Backup)(User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (02/04/2014 10:59:20 AM) (Source: ATIeRecord)(User: )
Description:

Error: (02/04/2014 10:59:16 AM) (Source: Schedule)(User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:59:14 AM) (Source: Wininit)(User: )
Description: C:\Windows\system32\lsass.exe255

Error: (02/04/2014 10:57:21 AM) (Source: ATIeRecord)(User: )
Description:

Error: (02/04/2014 10:57:19 AM) (Source: Schedule)(User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:57:17 AM) (Source: Wininit)(User: )
Description: C:\Windows\system32\lsass.exe255


CodeIntegrity Errors:
===================================
  Date: 2013-06-07 16:08:23.000
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.998
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.996
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.990
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.987
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.985
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.979
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.977
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.974
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.968
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 38%
Total physical RAM: 3579.48 MB
Available physical RAM: 2188.39 MB
Total Pagefile: 7157.26 MB
Available Pagefile: 5464.24 MB
Total Virtual: 2047.88 MB
Available Virtual: 1918.43 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:540.79 GB) (Free:489.9 GB) NTFS
Drive d: (Daten) (Fixed) (Total:390.62 GB) (Free:390.43 GB) NTFS
Drive e: (GSP1RMCPRFRER_DE_DVD) (CDROM) (Total:2.34 GB) (Free:0 GB) UDF
Drive g: (VERBATIM) (Fixed) (Total:465.65 GB) (Free:119 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: DF7D657B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=541 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=391 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 06CC59EE)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)

==================== End Of Log ============================

cosinus 05.02.2014 01:23
Malware seh ich da so nicht, aber wenn ich sowas sehe:

Zitat:
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG)
Kommt ein dezenter Brechreiz :D
Das gleiche wenn ich TuneUp oder ähnliche Systemverhunzer sehe :pfeiff:

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Billunder 05.02.2014 01:36
Ich könnte dir eine Tüte reichen...

mbar hat nichts gefunden. Hier das Logfile:

Code:
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.02.04.13

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16736
**** :: HEIM-PC [administrator]

05.02.2014 01:26:40
mbar-log-2014-02-05 (01-26-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 206849
Time elapsed: 6 minute(s), 22 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 05.02.2014 09:51
Zitat:
Ich könnte dir eine Tüte reichen...
Aber eine große bitte :D

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Billunder 06.02.2014 00:14
Good evening,

ich hoffe es geht heute wieder besser :rofl:

hier der/die/das adwcleaner-log:

Code:
# AdwCleaner v3.018 - Bericht erstellt am 05/02/2014 um 23:48:56
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : **** - HEIM-PC
# Gestartet von : C:\Users\****\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Mozilla Firefox v

-\\ Google Chrome v

[ Datei : C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R10].txt - [316 octets] - [31/01/2014 12:17:47]
AdwCleaner[R11].txt - [2279 octets] - [04/02/2014 22:40:40]
AdwCleaner[R12].txt - [1058 octets] - [05/02/2014 23:47:36]
AdwCleaner[R9].txt - [316 octets] - [30/01/2014 21:48:59]
AdwCleaner[S0].txt - [2290 octets] - [04/02/2014 23:42:35]
AdwCleaner[S1].txt - [980 octets] - [05/02/2014 23:48:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1039 octets] ##########
Das JRT habe ich jetzt zweimal durch laufen lassen, aber es gibt keine .txt-Datei auf dem Desktop.

Soll ich trotzdem ein frisches FRST schicken, oder hast Du noch eine Idee, wo die sich versteckt haben kann.

deeprybka 06.02.2014 00:38
Zitat:
Gestartet von : C:\Users\****\Downloads\adwcleaner.exe
Zitat:
Running from C:\Users\****\Downloads

Bitte Tools immer vom Desktop starten.
Schau mal im Download-Ordner nach den Logs ;)

FRST bitte anschließend wie von Cosinus gerfordert :)

Billunder 06.02.2014 00:55
Da bin ich wieder zu blöd für. Wenn ich das Programm downloade, landet es in meinem Download-Ordner. Ziehe ich es von da auf den Desktop, steht in der txt trotzdem als Startort
Code:
Gestartet von : C:\Users\****\Downloads\adwcleaner.exe
Und in diesem Download-Ordner finde ich die Logdatei von JRT leider auch nicht.

Es ist ein Kreuz...

Ich mache morgen weiter. Gute Nacht.

deeprybka 06.02.2014 01:47
Zitat:
Zitat von Billunder (Beitrag 1247137)
Da bin ich wieder zu blöd für. Wenn ich das Programm downloade, landet es in meinem Download-Ordner. Ziehe ich es von da auf den Desktop, steht in der txt trotzdem als Startort
Code:
Gestartet von : C:\Users\****\Downloads\adwcleaner.exe
Und in diesem Download-Ordner finde ich die Logdatei von JRT leider auch nicht.

Es ist ein Kreuz...

Ich mache morgen weiter. Gute Nacht.
Ach was Ralf, bist doch nicht zu blöd.
Normalerweise sollte auf dem Desktop auch das JRT-Log liegen, selbst wenn Du das Tool von "woanders" ausführst. Führst Du es zweimal aus, wird das erste Log vor dem Scanergebnis des zweiten Laufs gelöscht.

Bei FRST z.B. ist es so: Da wo Du es ausführst (Download) würdest Du auch das Log finden.

Schau einfach mal in Ruhe morgen...

Billunder 06.02.2014 15:13
So, die Zeit hat hier leider gar nichts geheilt. Fakt ist:

1.) Ich kann den Download-Zielordner nicht verändern, weil ich recht oben im Browser keine Menüanzeige, sondern Kaspersky Modul zur Link-Untersuchung, Virtuelle Tastatur und Schraubenschlüssel habe.

2.) JRT habe ich zwar auf dem Desktop aber auch nach erneutem Durchlauf wird kein Log-File erstellt. Irgendwann ist das Programm einfach fertig und das Fenster schliesst sich.

Wie soll ich denn jetzt weiter verfahren? Bei anderen geht es doch auch!!!

cosinus 06.02.2014 15:19
Zitat:
1.) Ich kann den Download-Zielordner nicht verändern
Aber sicher kannst du das. Einfach mal den Browser entsprechend einstellen.
Zudem hat man auch die Möglichkeit Dateien auf den Desktop zu verschieben

Billunder 06.02.2014 16:28
Ich bemühe mich wirklich, alles genau so zu machen, wie ihr es vorgebt. Aber ich finde kein Browsermenü. Und ich den Hilfedateien von Chrome, werde ich immer wieder auf diesen Menübutton verwiesen. Es ist halt einfach keiner da.

Und weiterhin kein JRT-Log.

Was ich also jetzt anbieten kann ist folgendes:

ADWCleaner-Log:

Code:
# AdwCleaner v3.018 - Bericht erstellt am 06/02/2014 um 15:37:04
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : **** - HEIM-PC
# Gestartet von : C:\Users\****\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Mozilla Firefox v

-\\ Google Chrome v

[ Datei : C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R10].txt - [316 octets] - [31/01/2014 12:17:47]
AdwCleaner[R11].txt - [2279 octets] - [04/02/2014 22:40:40]
AdwCleaner[R12].txt - [1058 octets] - [05/02/2014 23:47:36]
AdwCleaner[R13].txt - [1178 octets] - [06/02/2014 00:43:55]
AdwCleaner[R14].txt - [1299 octets] - [06/02/2014 15:32:09]
AdwCleaner[R9].txt - [316 octets] - [30/01/2014 21:48:59]
AdwCleaner[S0].txt - [2290 octets] - [04/02/2014 23:42:35]
AdwCleaner[S1].txt - [1104 octets] - [05/02/2014 23:48:56]
AdwCleaner[S2].txt - [1239 octets] - [06/02/2014 00:44:26]
AdwCleaner[S3].txt - [1220 octets] - [06/02/2014 15:37:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1280 octets] ##########
FRST-Log:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2014
Ran by **** (administrator) on HEIM-PC on 06-02-2014 16:24:55
Running from C:\Users\****\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Infowatch) C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Windows\System32\XSrvSetup.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared Files\brs.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(ArcSoft, Inc.) C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\klwtblfs.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation)
HKLM\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [RemoteControl8] - C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-07-16] (CyberLink Corp.)
HKLM\...\Run: [PDVD8LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-08-28] (cyberlink)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1246544 2010-11-03] (Logitech, Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Eraser] - C:\Program Files\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\klogon: C:\Windows\system32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\Run: [Video Performer63600.exe] - "C:\Users\****~1\AppData\Local\Temp\Video Performer63600.exe" /XML="C:\Users\****~1\AppData\Local\Temp\B7BA.tmp" /STP=0:2 <===== ATTENTION
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-2546021727-1158181519-2853444584-1000\...\MountPoints2: {43658060-b806-11df-abb4-806e6f6e6963} - E:\Run.exe

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} -  No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {02CF5479-CEBD-45F5-95D4-2AEFDA04EE89} URL =
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: No Name - {53707962-6F74-2D53-2644-206D7942484F} -  No File
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - No Name - !{62d40876-df18-411f-9d34-a9dd7a197bc5} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.214

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\****\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\****\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox 4.0 Beta 11\firefox.exe

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "hxxp://www.ch-aviation.ch/portal/"
CHR DefaultSearchKeyword: r
CHR DefaultSearchProvider: Web Search
CHR DefaultSearchURL: hxxp://www.google.com
CHR Plugin: (Chrome PDF Viewer) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\pdf.dll ()
CHR Plugin: (Google Gears 0.5.33.0) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\gears.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\gcswf32.dll ()
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.2.733_0\plugin/npUrlAdvisor.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.2.733_0\plugin/npVKPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.2.733_0\plugin/npABPlugin.dll (Kaspersky Lab ZAO)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\np-mswmp.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin5.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugins\npqtplugin7.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\****\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Yahoo! activeX Plug-in Bridge) - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
CHR Plugin: (Octoshape Streaming Services) - C:\Users\****\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-06-11]
CHR Extension: (Virtuelle Tastatur) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-06-11]
CHR Extension: (Anti-Banner) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-06-11]
CHR HKLM\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\****\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2013-06-11]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\urladvisor.crx [2012-12-18]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\virtkbd.crx [2012-12-18]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\ab.crx [2012-12-18]
CHR HKCU\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\****\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-12-18]
CHR StartMenuInternet: Google Chrome - C:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 JMB36X; C:\Windows\System32\XSrvSetup.exe [65536 2009-08-06] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 McComponentHostService; "C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe" [X]
S2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [X]

==================== Drivers (Whitelisted) ====================

S3 AF9035BDA; C:\Windows\System32\Drivers\AF9035BDA.sys [368000 2010-09-04] (AfaTech                  )
R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26032 2013-06-02] (Wondershare)
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW73.sys [101904 2010-07-15] (ATI Technologies, Inc.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [88632 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [39352 2009-12-14] (Infowatch)
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [99440 2009-10-29] (JMicron Technology Corp.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135984 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13104 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [585560 2013-06-11] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [23856 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19984 2009-11-02] (Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files\CyberLink\PowerDVD8\000.fcl [87536 2009-08-28] (CyberLink Corp.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-06 16:23 - 2014-02-06 16:25 - 00020418 _____ () C:\Users\****\Desktop\FRST.txt
2014-02-06 16:21 - 2014-02-06 16:21 - 00000000 ____D () C:\Users\****\Desktop\FRST-OlderVersion
2014-02-06 16:04 - 2014-02-06 16:04 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
2014-02-06 15:31 - 2014-02-06 15:31 - 01166132 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-02-05 23:53 - 2014-02-04 08:38 - 01037530 _____ (Thisisu) C:\Users\****\Desktop\JRT_NEW.exe
2014-02-05 01:26 - 2014-02-05 01:26 - 00107224 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-02-05 01:10 - 2014-02-06 16:21 - 01139200 _____ (Farbar) C:\Users\****\Desktop\FRST.exe
2014-02-04 20:51 - 2014-02-04 20:51 - 00002182 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-01-31 19:23 - 2014-01-31 19:23 - 00000000 ____D () C:\Windows\system32\%PersonalRootCertificateFolder%
2014-01-31 14:02 - 2014-02-04 11:51 - 00000000 ____D () C:\Program Files\Tweaking.com - Windows Repair
2014-01-31 13:53 - 2014-02-04 11:12 - 00000000 ____D () C:\Users\****\Downloads\tweaking.com_windows_repair_aio
2014-01-31 13:38 - 2014-01-31 13:38 - 02903255 _____ () C:\Users\****\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-31 12:15 - 2014-01-31 12:15 - 00448512 _____ (OldTimer Tools) C:\Users\****\Downloads\TFC.exe
2014-01-30 22:06 - 2014-01-30 22:07 - 00001820 _____ () C:\sc-cleaner.txt
2014-01-30 22:06 - 2014-01-30 22:06 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\****\Downloads\sc-cleaner.exe
2014-01-30 21:03 - 2014-02-06 16:24 - 00000000 ____D () C:\FRST
2014-01-30 20:39 - 2014-02-04 11:43 - 00000000 ____D () C:\Windows\ERUNT
2014-01-30 20:12 - 2014-01-30 20:12 - 04101441 _____ () C:\Users\****\Downloads\tdsskiller.zip
2014-01-30 19:36 - 2014-02-05 01:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-30 19:36 - 2014-02-05 01:25 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-30 19:35 - 2014-02-05 01:33 - 00000000 ____D () C:\Users\****\Desktop\mbar
2014-01-30 19:33 - 2014-01-30 19:33 - 00000340 _____ () C:\AdwCleaner[R2].txt
2014-01-30 13:53 - 2014-01-30 13:53 - 01037068 _____ (Thisisu) C:\Users\****\Downloads\JRT.exe
2014-01-30 13:51 - 2014-01-30 13:51 - 12589848 _____ (Malwarebytes Corp.) C:\Users\****\Downloads\mbar-1.07.0.1009.exe
2014-01-30 13:43 - 2014-01-30 13:43 - 00013507 _____ () C:\Users\****\Downloads\MemTest4.zip
2014-01-30 13:39 - 2014-01-30 13:39 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\****\Downloads\tdsskiller.exe
2014-01-30 12:58 - 2014-02-06 15:37 - 00000000 ____D () C:\AdwCleaner
2014-01-30 11:46 - 2014-02-06 16:04 - 00000952 _____ () C:\Windows\setupact.log
2014-01-30 11:46 - 2014-01-30 11:46 - 00109280 _____ () C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-30 11:46 - 2014-01-30 11:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-30 11:45 - 2014-01-31 13:59 - 00001796 _____ () C:\Windows\PFRO.log
2014-01-30 11:45 - 2014-01-30 11:46 - 00408696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 01:27 - 2014-02-04 11:51 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-01-30 01:27 - 2014-01-30 01:27 - 00002147 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-30 01:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2014-01-30 01:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean(27442).exe
2014-01-30 01:26 - 2014-01-30 01:26 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\****\Downloads\spybot-2.2.25.exe
2014-01-30 01:01 - 2014-02-06 16:08 - 00365759 _____ () C:\Windows\WindowsUpdate.log
2014-01-19 21:36 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-19 21:36 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-19 21:36 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-19 21:36 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-19 21:35 - 2014-01-19 21:36 - 00005315 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-10 10:24 - 2014-02-04 11:10 - 00000000 ____D () C:\Users\****\AppData\Local\DVDVideoSoft_Ltd
2014-01-10 10:05 - 2014-01-10 10:26 - 00000000 ____D () C:\Users\****\AppData\Roaming\DVDVideoSoft

==================== One Month Modified Files and Folders =======

2014-02-06 16:25 - 2014-02-06 16:23 - 00020418 _____ () C:\Users\****\Desktop\FRST.txt
2014-02-06 16:24 - 2014-01-30 21:03 - 00000000 ____D () C:\FRST
2014-02-06 16:21 - 2014-02-06 16:21 - 00000000 ____D () C:\Users\****\Desktop\FRST-OlderVersion
2014-02-06 16:21 - 2014-02-05 01:10 - 01139200 _____ (Farbar) C:\Users\****\Desktop\FRST.exe
2014-02-06 16:12 - 2009-07-14 05:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 16:12 - 2009-07-14 05:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 16:08 - 2014-01-30 01:01 - 00365759 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 16:05 - 2013-04-11 15:46 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-06 16:04 - 2014-02-06 16:04 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
2014-02-06 16:04 - 2014-01-30 11:46 - 00000952 _____ () C:\Windows\setupact.log
2014-02-06 16:04 - 2010-11-24 23:21 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-06 16:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 16:01 - 2012-04-01 09:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 15:51 - 2010-11-24 23:21 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 15:37 - 2014-01-30 12:58 - 00000000 ____D () C:\AdwCleaner
2014-02-06 15:31 - 2014-02-06 15:31 - 01166132 _____ () C:\Users\****\Desktop\adwcleaner.exe
2014-02-05 01:33 - 2014-01-30 19:36 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-05 01:33 - 2014-01-30 19:35 - 00000000 ____D () C:\Users\****\Desktop\mbar
2014-02-05 01:26 - 2014-02-05 01:26 - 00107224 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-02-05 01:25 - 2014-01-30 19:36 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-02-04 22:01 - 2012-04-01 09:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-04 22:01 - 2011-07-10 10:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-04 21:27 - 2010-09-04 10:37 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-04 20:51 - 2014-02-04 20:51 - 00002182 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-02-04 12:08 - 2010-09-04 10:32 - 00000000 ____D () C:\Users\****
2014-02-04 11:57 - 2011-01-14 00:40 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-02-04 11:51 - 2014-01-31 14:02 - 00000000 ____D () C:\Program Files\Tweaking.com - Windows Repair
2014-02-04 11:51 - 2014-01-30 01:27 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-02-04 11:51 - 2013-08-16 12:47 - 00000000 ____D () C:\Program Files\TrueCrypt
2014-02-04 11:51 - 2013-04-12 13:52 - 00000000 ____D () C:\Program Files\Eraser
2014-02-04 11:51 - 2013-04-11 15:50 - 00000000 ___RD () C:\Backup
2014-02-04 11:51 - 2012-08-19 21:13 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-04 11:51 - 2010-12-04 23:41 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-04 11:51 - 2010-12-04 19:29 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-04 11:51 - 2009-07-14 09:56 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-04 11:51 - 2009-07-14 09:56 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-04 11:51 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-02-04 11:51 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\de
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-04 11:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 __RSD () C:\Windows\Media
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\th-TH
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ras
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\icsxml
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\he-IL
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\et-EE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\com
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\L2Schemas
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Cursors
2014-02-04 11:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-04 11:50 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\twain_32
2014-02-04 11:50 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\TAPI
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ias
2014-02-04 11:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system
2014-02-04 11:49 - 2013-11-11 12:50 - 00000000 ____D () C:\Users\****\AppData\Roaming\vlc
2014-02-04 11:49 - 2013-05-20 01:36 - 00000000 ___SD () C:\Users\****\Documents\Passwords Database
2014-02-04 11:49 - 2009-07-14 09:57 - 00000000 ____D () C:\Windows\ShellNew
2014-02-04 11:49 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\de-DE
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\addins
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-02-04 11:49 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\IME
2014-02-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\Services
2014-02-04 11:45 - 2011-06-18 17:13 - 00000000 ____D () C:\Windows\system32\SPReview
2014-02-04 11:45 - 2011-06-18 17:12 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-02-04 11:45 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2014-02-04 11:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-04 11:45 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-02-04 11:44 - 2010-09-04 10:51 - 00000000 ____D () C:\Windows\RaidTool
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\schemas
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\PLA
2014-02-04 11:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-04 11:43 - 2014-01-30 20:39 - 00000000 ____D () C:\Windows\ERUNT
2014-02-04 11:43 - 2011-08-13 16:04 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Octoshape Streaming Services
2014-02-04 11:43 - 2011-08-10 18:28 - 00000000 ____D () C:\Users\****\AppData\Local\Microsoft Help
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\picpick
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicPick
2014-02-04 11:43 - 2011-05-11 15:12 - 00000000 ____D () C:\Program Files\PicPick
2014-02-04 11:43 - 2011-04-02 15:25 - 00000000 ____D () C:\Program Files\Veetle
2014-02-04 11:43 - 2011-02-28 17:18 - 00000000 ____D () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATCBOX
2014-02-04 11:43 - 2011-02-22 21:50 - 00000000 ____D () C:\Program Files\SopCast
2014-02-04 11:43 - 2010-12-08 10:48 - 00000000 ____D () C:\Program Files\QuickTime
2014-02-04 11:43 - 2010-12-04 23:43 - 00000000 ____D () C:\Windows\de
2014-02-04 11:43 - 2010-12-04 19:34 - 00000000 ____D () C:\Program Files\Microsoft Baseline Security Analyzer 2
2014-02-04 11:43 - 2010-11-24 23:22 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-04 11:43 - 2010-11-24 23:22 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-04 11:43 - 2010-09-04 11:16 - 00000000 ____D () C:\Users\****\AppData\Roaming\ArcSoft
2014-02-04 11:43 - 2010-09-04 11:07 - 00000000 ____D () C:\Windows\CheckSur
2014-02-04 11:43 - 2010-09-04 10:32 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-04 11:43 - 2010-09-04 10:32 - 00000000 ___RD () C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-04 11:42 - 2013-11-18 01:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox 4.0 Beta 11
2014-02-04 11:42 - 2012-06-17 23:17 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-04 11:42 - 2011-12-06 00:06 - 00000000 ____D () C:\Program Files\dradio-Recorder
2014-02-04 11:42 - 2011-08-10 18:31 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-02-04 11:42 - 2011-06-18 15:48 - 00000000 ____D () C:\Program Files\Common Files\Tobit
2014-02-04 11:42 - 2011-01-13 23:14 - 00000000 ____D () C:\Users\****\AppData\Roaming\K-Meleon
2014-02-04 11:42 - 2011-01-13 23:14 - 00000000 ____D () C:\Program Files\K-Meleon
2014-02-04 11:42 - 2010-09-04 11:56 - 00000000 ____D () C:\Program Files\Common Files\CyberLink
2014-02-04 11:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\XPSViewer
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\winrm
2014-02-04 11:27 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\WCN
2014-02-04 11:27 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell
2014-02-04 11:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Web
2014-02-04 11:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Vss
2014-02-04 11:26 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\slmgr
2014-02-04 11:26 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spp
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spool
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Speech
2014-02-04 11:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\SMI
2014-02-04 11:25 - 2010-09-04 11:15 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NetworkList
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\MUI
2014-02-04 11:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\IME
2014-02-04 11:21 - 2012-12-19 16:12 - 00000000 ____D () C:\Windows\system32\Adobe
2014-02-04 11:21 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-02-04 11:19 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2014-02-04 11:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\security
2014-02-04 11:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Resources
2014-02-04 11:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-02-04 11:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Globalization
2014-02-04 11:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Branding
2014-02-04 11:12 - 2014-01-31 13:53 - 00000000 ____D () C:\Users\****\Downloads\tweaking.com_windows_repair_aio
2014-02-04 11:12 - 2010-12-04 22:37 - 00000000 ____D () C:\Users\****\SecurityScans
2014-02-04 11:12 - 2010-09-08 19:48 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-04 11:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-02-04 11:11 - 2012-07-11 12:31 - 00000000 ____D () C:\Users\****\AppData\Roaming\Orbit
2014-02-04 11:11 - 2011-12-06 00:06 - 00000000 ____D () C:\Users\****\AppData\Roaming\phonostar GmbH
2014-02-04 11:11 - 2011-08-13 16:04 - 00000000 ____D () C:\Users\****\AppData\Roaming\Octoshape
2014-02-04 11:11 - 2010-12-04 19:29 - 00000000 ____D () C:\Users\****\AppData\Roaming\Malwarebytes
2014-02-04 11:11 - 2010-11-29 23:28 - 00000000 ____D () C:\Users\****\AppData\Roaming\Mozilla
2014-02-04 11:11 - 2010-11-24 23:21 - 00000000 ____D () C:\Users\****\AppData\Roaming\Adobe
2014-02-04 11:11 - 2010-11-24 21:14 - 00000000 ____D () C:\Users\****\AppData\Roaming\Panda Security
2014-02-04 11:11 - 2010-09-04 10:32 - 00000000 ____D () C:\Users\****\AppData\Local\VirtualStore
2014-02-04 11:10 - 2014-01-10 10:24 - 00000000 ____D () C:\Users\****\AppData\Local\DVDVideoSoft_Ltd
2014-02-04 11:10 - 2011-02-28 17:17 - 00000000 ____D () C:\Users\****\AppData\Local\Apps\2.0
2014-02-04 11:10 - 2010-11-24 23:21 - 00000000 ____D () C:\Users\****\AppData\Local\Google
2014-02-04 11:10 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-02-04 11:09 - 2011-09-16 13:26 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-04 11:09 - 2011-08-07 17:56 - 00000000 ____D () C:\Program Files\Xvid
2014-02-04 11:09 - 2011-06-18 15:48 - 00000000 ____D () C:\Program Files\Tobit Radio.fx
2014-02-04 11:09 - 2011-02-17 12:10 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-02-04 11:09 - 2010-12-08 10:48 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-04 11:09 - 2010-12-04 23:42 - 00000000 ____D () C:\Program Files\Windows Live
2014-02-04 11:09 - 2010-12-04 19:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 11:09 - 2010-12-01 01:05 - 00000000 ____D () C:\Program Files\Yahoo!
2014-02-04 11:09 - 2010-11-30 22:04 - 00000000 ____D () C:\ProgramData\Apple
2014-02-04 11:09 - 2010-11-24 23:22 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 11:09 - 2010-09-04 11:16 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-02-04 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-04 11:08 - 2011-07-04 15:13 - 00000000 ____D () C:\Program Files\MSECache
2014-02-04 11:08 - 2010-12-04 23:42 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-02-04 11:08 - 2010-09-04 11:03 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-02-04 11:08 - 2010-09-04 10:52 - 00000000 ____D () C:\Program Files\NEC Electronics
2014-02-04 11:08 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-02-04 11:08 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-02-04 11:07 - 2013-06-11 01:07 - 00000000 ____D () C:\Program Files\Kaspersky Lab
2014-02-04 11:07 - 2012-06-17 14:53 - 00000000 ____D () C:\Program Files\Java
2014-02-04 11:07 - 2011-08-10 18:29 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-02-04 11:07 - 2011-07-04 15:14 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-04 11:07 - 2010-11-24 23:21 - 00000000 ____D () C:\Program Files\Google
2014-02-04 11:07 - 2010-09-04 10:50 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-04 11:07 - 2010-09-04 10:49 - 00000000 ____D () C:\Program Files\Intel
2014-02-04 11:07 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-02-04 11:06 - 2010-12-04 23:02 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-02-04 11:06 - 2010-09-04 11:55 - 00000000 ____D () C:\Program Files\CyberLink
2014-02-04 11:06 - 2010-09-04 10:50 - 00000000 ____D () C:\Program Files\Common Files\postureAgent
2014-02-04 11:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\SpeechEngines
2014-02-04 11:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-02-04 11:05 - 2013-11-22 17:11 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-02-04 11:05 - 2013-06-11 01:07 - 00000000 ____D () C:\Program Files\Common Files\InfoWatch
2014-02-04 11:05 - 2012-04-24 23:06 - 00000000 ____D () C:\Program Files\Ashampoo
2014-02-04 11:05 - 2011-08-10 18:28 - 00000000 __RHD () C:\MSOCache
2014-02-04 11:05 - 2011-06-15 22:08 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-04 11:05 - 2011-06-15 22:08 - 00000000 ____D () C:\Program Files\Adobe
2014-02-04 11:05 - 2010-10-19 09:26 - 00000000 ____D () C:\Program Files\ATI
2014-02-04 11:05 - 2010-10-19 09:25 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-02-04 11:05 - 2010-10-19 09:25 - 00000000 ____D () C:\ATI
2014-02-04 11:05 - 2010-09-04 11:15 - 00000000 ____D () C:\Program Files\Common Files\ArcSoft
2014-02-04 11:05 - 2010-09-04 11:15 - 00000000 ____D () C:\Program Files\ArcSoft
2014-02-04 11:05 - 2010-09-04 10:51 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-02-04 08:38 - 2014-02-05 23:53 - 01037530 _____ (Thisisu) C:\Users\****\Desktop\JRT_NEW.exe
2014-02-01 12:10 - 2010-10-15 18:33 - 00000000 ____D () C:\Windows\Minidump
2014-02-01 11:25 - 2013-08-09 12:05 - 00000000 ____D () C:\Users\****\AppData\Roaming\Apowersoft
2014-02-01 11:25 - 2010-09-04 11:17 - 00000000 ____D () C:\Users\****\AppData\Roaming\Macromedia
2014-02-01 11:24 - 2010-11-29 23:28 - 00000000 ____D () C:\Users\****\AppData\Local\Mozilla
2014-02-01 11:17 - 2013-08-09 12:05 - 00000000 ____D () C:\Program Files\Apowersoft
2014-01-31 22:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-01-31 19:23 - 2014-01-31 19:23 - 00000000 ____D () C:\Windows\system32\%PersonalRootCertificateFolder%
2014-01-31 14:11 - 2013-08-14 13:49 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-01-31 13:59 - 2014-01-30 11:45 - 00001796 _____ () C:\Windows\PFRO.log
2014-01-31 13:38 - 2014-01-31 13:38 - 02903255 _____ () C:\Users\****\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-31 12:15 - 2014-01-31 12:15 - 00448512 _____ (OldTimer Tools) C:\Users\****\Downloads\TFC.exe
2014-01-30 22:07 - 2014-01-30 22:06 - 00001820 _____ () C:\sc-cleaner.txt
2014-01-30 22:06 - 2014-01-30 22:06 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\****\Downloads\sc-cleaner.exe
2014-01-30 21:47 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 20:12 - 2014-01-30 20:12 - 04101441 _____ () C:\Users\****\Downloads\tdsskiller.zip
2014-01-30 19:33 - 2014-01-30 19:33 - 00000340 _____ () C:\AdwCleaner[R2].txt
2014-01-30 13:53 - 2014-01-30 13:53 - 01037068 _____ (Thisisu) C:\Users\****\Downloads\JRT.exe
2014-01-30 13:51 - 2014-01-30 13:51 - 12589848 _____ (Malwarebytes Corp.) C:\Users\****\Downloads\mbar-1.07.0.1009.exe
2014-01-30 13:43 - 2014-01-30 13:43 - 00013507 _____ () C:\Users\****\Downloads\MemTest4.zip
2014-01-30 13:39 - 2014-01-30 13:39 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\****\Downloads\tdsskiller.exe
2014-01-30 11:46 - 2014-01-30 11:46 - 00109280 _____ () C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-30 11:46 - 2014-01-30 11:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-30 11:46 - 2014-01-30 11:45 - 00408696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-30 04:18 - 2011-01-13 23:14 - 00000000 ____D () C:\Users\****\AppData\Local\K-Meleon
2014-01-30 02:07 - 2010-12-04 19:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-30 01:45 - 2009-07-14 03:05 - 00106412 _____ () C:\Windows\system32\perfc009(27441).dat
2014-01-30 01:27 - 2014-01-30 01:27 - 00002147 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-30 01:26 - 2014-01-30 01:26 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\****\Downloads\spybot-2.2.25.exe
2014-01-20 09:47 - 2010-11-25 13:08 - 00000000 ____D () C:\Users\****\AppData\Local\Adobe
2014-01-19 21:41 - 2013-10-26 08:58 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-19 21:36 - 2014-01-19 21:35 - 00005315 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-10 10:26 - 2014-01-10 10:05 - 00000000 ____D () C:\Users\****\AppData\Roaming\DVDVideoSoft

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 15:04

==================== End Of Log ============================
--- --- ---


und Addition:

Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-02-2014
Ran by **** at 2014-02-06 16:25:09
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky PURE 2.0 (Enabled - Out of date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 2.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky PURE 2.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (Version: 12.0.3.133 - Adobe Systems, Inc.)
ArcSoft TotalMedia 3.5 (Version: 3.5.28.291 - ArcSoft)
Ashampoo WinOptimizer 6.60 (Version: 6.6.0 - Ashampoo GmbH & Co. KG)
ATCBOXlive! (HKCU Version: 0.2.0.0 - ATCBOX)
ATI Catalyst Install Manager (Version: 3.0.790.0 - ATI Technologies, Inc.)
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2010.0825.2146.37182 - ATI Technologies, Inc.) Hidden
CCC Help English (Version: 2010.0825.2145.37182 - ATI) Hidden
ccc-core-static (Version: 2010.0825.2146.37182 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.0825.2146.37182 - ATI) Hidden
CCleaner (Version: 4.08 - Piriform)
CyberLink BD & 3D Advisor 2.0 (Version:  - )
CyberLink PowerDVD 8 (Version: 8.0.3228 - CyberLink Corp.)
CyberLink PowerDVD 8 (Version: 8.0.3228 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
dradio-Recorder Version 3.02.2 (Version:  - )
Eraser 6.0.10.2620 (Version: 6.0.2620 - The Eraser Project)
Gigabyte Raid Cinfigurer (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Google Chrome (HKCU Version: 8.0.552.237 - Google Inc.)
Google Earth (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Intel(R) Control Center (Version: 1.2.0.1006 - Intel Corporation)
Intel(R) Management Engine Components (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037 - Intel Corporation)
Java 7 Update 51 (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kaspersky PURE 2.0 (Version: 12.0.2.733 - Kaspersky Lab)
Kaspersky PURE 2.0 (Version: 12.0.2.733 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.8 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Baseline Security Analyzer 2.2 (Version: 2.2.2170 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel Viewer (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.17.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.17.0 - NEC Electronics Corporation) Hidden
Octoshape Streaming Services (HKCU Version:  - Octoshape ApS)
PicPick (Version: 3.0.4 - Wiziple software)
QuickShare (Version: 1.6.1.714 - Linkury Inc.) <==== ATTENTION
QuickTime (Version: 7.69.80.9 - Apple Inc.)
Revo Uninstaller 1.92 (Version: 1.92 - VS Revo Group)
SopCast 3.3.2 (Version: 3.3.2 - www.sopcast.com)
Spybot - Search & Destroy (Version: 2.2.25 - Safer-Networking Ltd.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TrueCrypt (Version: 7.1a - TrueCrypt Foundation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2010 (KB2494150) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (Version:  - Microsoft)
Veetle TV (Version: 0.9.19 - Veetle, Inc)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.0.8 (Version: 2.0.8 - VideoLAN)
WDR RadioRecorder (Version:  - Tobit.Software)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (Version: 1.0.0.8 - Microsoft Corp)

==================== Restore Points  =========================

26-01-2014 19:13:59 Windows-Sicherung
30-01-2014 00:03:49 Revo Uninstaller's restore point - Mozilla Firefox 26.0 (x86 de)
30-01-2014 00:06:17 Revo Uninstaller's restore point - Mozilla Firefox 26.0 (x86 de)
30-01-2014 00:13:58 Revo Uninstaller's restore point - Apowersoft kostenloser Bildschirmrekorder V1.2.4
30-01-2014 03:16:05 Revo Uninstaller's restore point - K-Meleon 1.5.4 de-DE (nur entfernen)
31-01-2014 13:12:38 Tweaking.com - Windows Repair

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {32700E9D-CE37-4F7C-8AF0-97207D75FE7D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {41DA2388-66FC-4793-85AF-0526CE9F5979} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {836915BF-C6BF-4B4A-A49C-7568052630B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {AC811728-8193-41E7-BDEA-731B459DE629} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {B456BA6F-3F92-4D62-837D-E33070E8E824} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {BF59ED7E-C37A-4A1F-87F1-6CA41B29278E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {C4267CB0-E1EA-4481-874E-9D808AA3998B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {E00A2E76-4640-4D29-A800-03D5050B6051} - System32\Tasks\RunAsStdUser Task => C:\Program Files\ClickPotatoLite\bin\10.0.701.0\ClickPotatoLiteSA.exe
Task: {E0946C3F-58EB-4595-837A-B4068307327E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-08-30 21:23 - 2012-08-30 21:23 - 00459192 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\dblite.dll
2012-04-24 23:06 - 2010-02-12 09:37 - 00633696 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\ContextHandler.dll
2014-01-30 01:27 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-30 01:27 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2012-08-30 21:24 - 2012-08-30 21:24 - 02126264 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtCore4.dll
2012-08-30 21:24 - 2012-08-30 21:24 - 07422392 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtGui4.dll
2012-08-30 21:24 - 2012-08-30 21:24 - 02453944 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtDeclarative4.dll
2012-08-30 21:24 - 2012-08-30 21:24 - 01270200 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtScript4.dll
2012-08-30 21:24 - 2012-08-30 21:24 - 00192952 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtSql4.dll
2012-08-30 21:24 - 2012-08-30 21:24 - 00795064 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\QtNetwork4.dll
2011-09-05 18:36 - 2011-09-05 18:36 - 00025088 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\imageformats\qgif4.dll
2011-09-05 18:36 - 2011-09-05 18:36 - 00180224 _____ () C:\Program Files\Kaspersky Lab\Kaspersky PURE 2.0\imageformats\qjpeg4.dll
2010-09-04 11:15 - 2007-04-19 08:33 - 00035584 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\uPiApi.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2010-09-04 11:15 - 2008-11-26 15:59 - 00131584 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\AbilisWinUsb.dll
2010-09-04 11:15 - 2008-10-22 15:01 - 00200704 _____ () C:\Program Files\ArcSoft\TotalMedia 3.5\VendorCmdRW.dll
2010-09-04 10:51 - 2009-10-02 12:18 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-30 01:27 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2010-08-04 14:58 - 2010-08-04 14:58 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-25 20:44 - 2010-08-25 20:44 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-01-30 01:27 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-01-30 01:27 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2011-01-14 00:40 - 2011-01-08 04:35 - 04049976 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\pdf.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 01475128 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avcodec-52.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00099896 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avutil-50.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00197688 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\avformat-52.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00462904 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\libglesv2.dll
2011-01-14 00:40 - 2011-01-08 04:34 - 00123960 _____ () C:\Users\****\AppData\Local\Google\Chrome\Application\8.0.552.237\libegl.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 11:39:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WO6FW.exe, Version: 1.0.0.0, Zeitstempel: 0x4aa86f1c
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000812f
ID des fehlerhaften Prozesses: 0x14e0
Startzeit der fehlerhaften Anwendung: 0xWO6FW.exe0
Pfad der fehlerhaften Anwendung: WO6FW.exe1
Pfad des fehlerhaften Moduls: WO6FW.exe2
Berichtskennung: WO6FW.exe3

Error: (02/04/2014 11:37:57 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WO6FW.exe, Version: 1.0.0.0, Zeitstempel: 0x4aa86f1c
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000812f
ID des fehlerhaften Prozesses: 0xed0
Startzeit der fehlerhaften Anwendung: 0xWO6FW.exe0
Pfad der fehlerhaften Anwendung: WO6FW.exe1
Pfad des fehlerhaften Moduls: WO6FW.exe2
Berichtskennung: WO6FW.exe3

Error: (02/04/2014 08:51:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 0.0.0.0, Zeitstempel: 0x4d27c1b0
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe30
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (02/04/2014 08:36:33 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (02/04/2014 10:59:20 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2014 10:59:16 AM) (Source: Schedule) (User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:59:14 AM) (Source: Wininit) (User: )
Description: Ein kritischer Systemprozess C:\Windows\system32\lsass.exe ist fehlgeschlagen mit den Statuscode 255. Der Computer muss neu gestartet werden.

Error: (02/04/2014 10:57:21 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start

Error: (02/04/2014 10:57:19 AM) (Source: Schedule) (User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:57:17 AM) (Source: Wininit) (User: )
Description: Ein kritischer Systemprozess C:\Windows\system32\lsass.exe ist fehlgeschlagen mit den Statuscode 255. Der Computer muss neu gestartet werden.


System errors:
=============
Error: (02/06/2014 04:05:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/06/2014 04:05:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/06/2014 04:05:09 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (02/06/2014 02:12:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/06/2014 00:46:15 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/06/2014 00:46:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Rapid Storage Technology" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/06/2014 00:46:12 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Rapid Storage Technology erreicht.

Error: (02/06/2014 00:25:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/05/2014 11:51:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/05/2014 10:39:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SBSD Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (02/04/2014 11:39:13 PM) (Source: Application Error)(User: )
Description: WO6FW.exe1.0.0.04aa86f1cKERNELBASE.dll6.1.7601.1822951fb10c60eedfade0000812f14e001cf21f9e95b62f1C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\WO6FW.exeC:\Windows\system32\KERNELBASE.dll2b3e3d2e-8ded-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 11:37:57 PM) (Source: Application Error)(User: )
Description: WO6FW.exe1.0.0.04aa86f1cKERNELBASE.dll6.1.7601.1822951fb10c60eedfade0000812fed001cf21f9becbe837C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\WO6FW.exeC:\Windows\system32\KERNELBASE.dllfde24441-8dec-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 08:51:42 PM) (Source: Application Error)(User: )
Description: chrome.exe0.0.0.04d27c1b0unknown0.0.0.000000000c000000500000000e3001cf21e08f2708dfC:\Users\****\AppData\Local\Google\Chrome\Application\chrome.exeunknownc480bc99-8dd5-11e3-b980-6cf049b8fc5c

Error: (02/04/2014 08:36:33 PM) (Source: Windows Backup)(User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (02/04/2014 10:59:20 AM) (Source: ATIeRecord)(User: )
Description:

Error: (02/04/2014 10:59:16 AM) (Source: Schedule)(User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:59:14 AM) (Source: Wininit)(User: )
Description: C:\Windows\system32\lsass.exe255

Error: (02/04/2014 10:57:21 AM) (Source: ATIeRecord)(User: )
Description:

Error: (02/04/2014 10:57:19 AM) (Source: Schedule)(User: )
Description: Schedule error: 0Initialize call failed, bailing out

Error: (02/04/2014 10:57:17 AM) (Source: Wininit)(User: )
Description: C:\Windows\system32\lsass.exe255


CodeIntegrity Errors:
===================================
  Date: 2013-06-07 16:08:23.000
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.998
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.996
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.990
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.987
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.985
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.979
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.977
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.974
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-07 16:08:22.968
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 36%
Total physical RAM: 3579.48 MB
Available physical RAM: 2263.53 MB
Total Pagefile: 7157.26 MB
Available Pagefile: 5273.95 MB
Total Virtual: 2047.88 MB
Available Virtual: 1918.47 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:540.79 GB) (Free:488.28 GB) NTFS
Drive d: (Daten) (Fixed) (Total:390.62 GB) (Free:390.43 GB) NTFS
Drive g: (VERBATIM) (Fixed) (Total:465.65 GB) (Free:122.76 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: DF7D657B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=541 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=391 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 466 GB) (Disk ID: 06CC59EE)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)

==================== End Of Log ============================

cosinus 06.02.2014 16:40
Anleitung 1:1 umgesetzt? Ich verweise mal auf:

Zitat:
Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.

Billunder 06.02.2014 17:07
Ich schrieb ja, ich bemühe mich... ;-)

Allein das Ergebnis ist das gleiche. Es gibt keine Log-Datei.

Dafür einen Trojaneralarm. Bei "checking Internet Explorer" schlug mein Kaspersky an und vermeldete: PDM:Trojan.Win32.StartPage.a

Gelöscht. JRT brach ab. Tool erneut gestartet (natürlich mit den richtigen Rechten). Wieder Trojaneralarm an der gleichen Stelle. Diesmal Quarantäne. JRT brach ab.

cosinus 06.02.2014 23:44
Virenscanner mal deaktivieren bevor man JRT startet :D


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:49 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55