Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Ihavenet Trojaner auf dem rechner (https://www.trojaner-board.de/145923-ihavenet-trojaner-rechner.html)

MaladiA 11.12.2013 12:16
Ihavenet Trojaner auf dem rechner
 
Hi Leute, dieses Problem scheint hier sehr verbreitet zu sein :party:
- ich habe ihn auch ... wenn mir hier jemand helfen könnte wäre dies natürlich super ... muss aber unbedingt erwähnen dass ich nicht wirklich ein PC-Experte bin und erst Abends nach der Arbeit Antworten kann, ich gebe mein Bestes ... ca ab. 18.30 Uhr ...

Vielen Dank im Vorraus!
Grüße Günni

schrauber 11.12.2013 12:22
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


MaladiA 11.12.2013 12:28
Huhu schrauber, vielen Dank schonmal für deine Hilfe und Unterstützung.

Anweisung befolgt und Datein angehängt (hoffe ich) ....

schrauber 12.12.2013 09:19
Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

MaladiA 12.12.2013 10:53
oh ok, dann so ....

Addition

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-12-2013 01
Ran by Günni at 2013-12-11 12:26:16
Running from C:\Users\Günni\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

Acer eDisplay Management (x32 Version: 1.34.003)
Adobe After Effects CS5.5 Third Party Content (x32 Version: 10.5)
Adobe AIR (x32 Version: 3.1.0.4880)
Adobe Community Help (x32 Version: 3.4.980)
Adobe Content Viewer (x32 Version: 1.4.0)
Adobe Creative Suite 5.5 Master Collection (x32 Version: 5.5)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Adobe Story (x32 Version: 1.0.571)
Adobe Widget Browser (x32 Version: 2.0 Build 230)
Adobe Widget Browser (x32 Version: 2.0.230)
Apple Application Support (x32 Version: 2.3)
Apple Software Update (x32 Version: 2.1.3.127)
Battlefield 3™ (x32 Version: 1.4.0.0)
Battlefield 4™ (x32 Version: 1.0.0.1)
Battlelog Web Plugins (x32 Version: 2.3.2)
Browser Configuration Utility (x32 Version: 1.0.10.0)
Call of Duty: Ghosts - Multiplayer (x32)
Call of Duty: Ghosts (x32)
CameraHelperMsi (x32 Version: 13.31.1038.0)
Camtasia Studio 7 (x32 Version: 7.0.1)
CINEMA 4D 13.016 (Version: 13.016)
Diablo III (x32 Version: 1.0.8.16603)
erLT (x32 Version: 1.20.138.34)
ESN Sonar (x32 Version: 0.70.4)
FileZilla Client 3.5.2 (x32 Version: 3.5.2)
Free Studio version 5.7.6.1015 (x32 Version: 5.7.6.1015)
GeForce Experience NvStream Client Components (Version: 1.6.28)
High-Definition Video Playback (x32 Version: 11.1.10400.2.65)
ICQ7.7 (x32 Version: 7.7)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Network Connections 16.1.53.0 (Version: 16.1.53.0)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 7 Update 2 (64-bit) (Version: 7.0.20)
JDownloader 0.9 (x32 Version: 0.9)
JMicron JMB36X Driver (x32 Version: 1.17.58.2)
K-Lite Mega Codec Pack 9.1.0 (x32 Version: 9.1.0)
Logitech Vid HD (x32 Version: 7.2 (7240))
Logitech Webcam-Software (x32 Version: 2.30)
LWS Facebook (x32 Version: 13.31.1038.0)
LWS Gallery (x32 Version: 13.31.1038.0)
LWS Help_main (x32 Version: 13.31.1044.0)
LWS Launcher (x32 Version: 13.31.1038.0)
LWS Motion Detection (x32 Version: 13.30.1395.0)
LWS Pictures And Video (x32 Version: 13.31.1038.0)
LWS Twitter (x32 Version: 13.30.1346.0)
LWS Video Mask Maker (x32 Version: 13.30.1379.0)
LWS VideoEffects (Version: 13.30.1379.0)
LWS Webcam Software (x32 Version: 13.31.1038.0)
LWS WLM Plugin (x32 Version: 1.30.1201.0)
LWS YouTube Plugin (x32 Version: 13.31.1038.0)
marvell 91xx driver (x32 Version: 1.0.0.1051)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 25.0.1 (x86 de) (HKCU Version: 25.0.1)
Mozilla Firefox 9.0.1 (x86 de) (x32 Version: 9.0.1)
Mozilla Maintenance Service (x32 Version: 17.0.8)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 11 (x32 Version: 11.0.15800)
Nero 11 Cliparts (x32 Version: 11.0.11200.12.0)
Nero 11 Disc Menus 1 (x32 Version: 11.0.11200.12.0)
Nero 11 Disc Menus 2 (x32 Version: 11.0.11200.12.0)
Nero 11 Disc Menus 3 (x32 Version: 11.0.11200.12.0)
Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0)
Nero 11 Effects Basic (x32 Version: 11.0.11200.12.0)
Nero 11 Image Samples (x32 Version: 11.0.11200.12.0)
Nero 11 Kwik Themes 1 (x32 Version: 11.0.11200.12.0)
Nero 11 Kwik Themes 2 (x32 Version: 11.0.11200.12.0)
Nero 11 Kwik Themes 3 (x32 Version: 11.0.11200.12.0)
Nero 11 Kwik Themes 4 (x32 Version: 11.0.11200.12.0)
Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0)
Nero 11 PiP Effects 1 (x32 Version: 11.0.11200.12.0)
Nero 11 PiP Effects Basic (x32 Version: 11.0.11300.12.0)
Nero 11 Video Samples (x32 Version: 11.0.11200.12.0)
Nero 11 Video Transitions 1 (x32 Version: 11.0.11200.12.0)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)
Nero BackItUp 11 (x32 Version: 6.0.16000.13.100)
Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200)
Nero Backup Drivers (Version: 1.0.10000.1.0)
Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100)
Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300)
Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23)
Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300)
Nero Core Components 11 (x32 Version: 11.0.15000.1.12)
Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100)
Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300)
Nero Express 11 (x32 Version: 11.0.11700.23.100)
Nero Express 11 Help (CHM) (x32 Version: 11.0.10300)
Nero Kwik Media (x32 Version: 1.10.19300.93.100)
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200)
Nero Recode 11 (x32 Version: 5.0.13300.32.100)
Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300)
Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100)
Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400)
Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100)
Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400)
Nero Update (x32 Version: 11.0.10623.22.0)
Nero Video 11 (x32 Version: 8.0.14000.21.100)
Nero Video 11 Help (CHM) (x32 Version: 11.0.10300)
Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100)
Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400)
nero.prerequisites.msi (x32 Version: 11.0.20008)
Norton 360 (x32 Version: 21.1.0.18)
NVIDIA 3D Vision Controller Driver (x32 Version: 275.33)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
OnlineFotoservice (x32 Version: 5.1.2)
Origin (x32 Version: 8.5.0.4554)
Pando Media Booster (x32 Version: 2.6.0.1)
PDF Settings CS5 (x32 Version: 10.0)
Picasa 3 (x32 Version: 3.9)
Pivot Pro Plugin (x32 Version: 9.50.110)
PokerStars (x32)
PunkBuster Services (x32 Version: 0.993)
PxMergeModule (x32 Version: 1.00.0000)
QuickTime (x32 Version: 7.74.80.86)
Razer BlackWidow Ultimate (x32 Version: 1.04.04)
Razer DeathAdder(TM) Mouse (x32 Version: 3.03)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6363)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)
Samsung AllShare (x32 Version: 2.1.0.12031_10)
SDK (x32 Version: 2.22.002)
Sennheiser 3D G4ME1 (x32 Version: 1.00.0001)
SHIELD Streaming (Version: 1.6.53)
ShotOnline (x32 Version: 1.0)
Skype Click to Call (x32 Version: 5.6.8442)
Skype™ 6.1 (x32 Version: 6.1.129)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client
TeamViewer 8 (x32 Version: 8.0.18051)
TuneUp Utilities 2012 (x32 Version: 12.0.2160.11)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11)
Universal AntiCheat 3 v1.072 R3 (x32)
VirtualCloneDrive (x32)
VLC media player 2.0.2 (x32 Version: 2.0.2)
welcome (x32 Version: 11.0.21500.0.4)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinRAR 4.01 (64-Bit) (Version: 4.01.0)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2012-01-14 23:40 - 00001435 ___AC C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate.adobe.com:443
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 adobeereg.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate.adobe.com


==================== Scheduled Tasks (whitelisted) =============

Task: {3432D427-FE17-4809-8D6D-A2B3FECA4957} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {41BD1267-8B77-47F1-982F-56110277B444} - System32\Tasks\Norton WSC Integration => X:\Norton360\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {4CE02457-E5D8-492D-AFEA-8B4DB0759296} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => X:\TuneUp2012\OneClick.exe [2011-12-14] (TuneUp Software)
Task: {69F3A830-6533-4E30-B2BC-47E6A15CD83E} - System32\Tasks\AdobeAAMUpdater-1.0-Günni-PC-Günni => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {726CE8F5-0570-4BFD-A0FA-B1CB5FF2F3CC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {978350BF-4E47-44BB-972C-C971A8AF885A} - System32\Tasks\Norton 360\Norton Error Processor => X:\Norton360\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {CC858F7D-8943-462C-8B2C-9D7A3DFA4FC8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D1A9FC48-AF27-4B90-824A-10A0652855CB} - System32\Tasks\Norton 360\Norton Error Analyzer => X:\Norton360\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {F349D647-4147-42F5-9991-D7E848EFD62D} - System32\Tasks\Aegykiny => C:\Windows\SysWOW64\msrdca.dll [2013-01-12] ()
Task: {F8DFE363-EC6B-4EED-9DEF-59CB3519070B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Aegykiny.job => C:\Windows\SysWOW64\msrdca.dll

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () X:\Filezilla\FileZilla FTP Client\fzshellext_64.dll
2012-01-07 14:20 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2011-11-08 21:46 - 2011-11-08 21:46 - 00093696 _____ () X:\Filezilla\FileZilla FTP Client\fzshellext.dll
2012-01-07 15:10 - 2010-04-23 07:14 - 00143360 _____ () C:\Windows\system\3DG4me.dll
2009-06-27 10:11 - 2009-06-27 10:11 - 00503202 _____ () C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 01135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 05717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 04671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 00054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 00044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll
2013-11-15 18:39 - 2013-11-15 18:39 - 03363952 _____ () X:\FireFox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/10/2013 08:07:57 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/09/2013 02:28:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/08/2013 00:26:29 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/07/2013 04:18:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/06/2013 00:08:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/05/2013 05:23:57 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Name des fehlerhaften Moduls: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000008fac75
ID des fehlerhaften Prozesses: 0x145c
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3

Error: (12/04/2013 06:57:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (12/04/2013 04:47:26 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Name des fehlerhaften Moduls: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000068431e
ID des fehlerhaften Prozesses: 0x1198
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3

Error: (12/04/2013 03:37:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Name des fehlerhaften Moduls: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000b0f035
ID des fehlerhaften Prozesses: 0x191c
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3

Error: (12/04/2013 01:54:59 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677
Ausnahmecode: 0x887a0006
Fehleroffset: 0x000000000000940d
ID des fehlerhaften Prozesses: 0x14f8
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3


System errors:
=============
Error: (12/11/2013 00:21:48 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SILKE-LAPI",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{9D97E21B-C5FB-4203-912E-C0365FECC563}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/11/2013 00:09:50 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SILKE-LAPI",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{9D97E21B-C5FB-4203-912E-C0365FECC563}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/11/2013 11:57:52 AM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SILKE-LAPI",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{9D97E21B-C5FB-4203-912E-C0365FECC563}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/11/2013 11:45:49 AM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SILKE-LAPI",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{9D97E21B-C5FB-4203-912E-C0365FECC563}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/11/2013 11:33:49 AM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SILKE-LAPI",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{9D97E21B-C5FB-4203-912E-C0365FECC563}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (12/11/2013 11:33:47 AM) (Source: WMPNetworkSvc) (User: )
Description: 0x80070422

Error: (12/11/2013 11:33:47 AM) (Source: WMPNetworkSvc) (User: )
Description: 0x80070422

Error: (12/11/2013 11:33:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/11/2013 11:32:05 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422

Error: (12/11/2013 11:32:04 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 18%
Total physical RAM: 12194.06 MB
Available physical RAM: 9941.52 MB
Total Pagefile: 24386.3 MB
Available Pagefile: 22086.98 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:70.31 GB) (Free:19.71 GB) NTFS
Drive d: (Silke) (Fixed) (Total:605.37 GB) (Free:571.37 GB) NTFS
Drive e: (Günni) (Fixed) (Total:605.47 GB) (Free:95.52 GB) NTFS
Drive g: (CANON_IJ) (CDROM) (Total:0.31 GB) (Free:0 GB) CDFS
Drive i: (PSC-Auslager) (Fixed) (Total:39.19 GB) (Free:36.82 GB) NTFS
Drive r: (Multimedia) (Fixed) (Total:652.08 GB) (Free:135.28 GB) NTFS
Drive x: (Programme) (Fixed) (Total:114.06 GB) (Free:52.93 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 49DBD0BA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=605 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=605 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=652 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 224 GB) (Disk ID: A5AC012E)
Partition 1: (Active) - (Size=70 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=114 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=39 GB) - (Type=07 NTFS)

==================== End Of Log ============================
FRST


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013 01
Ran by Günni (administrator) on GÜNNI-PC on 11-12-2013 12:26:02
Running from C:\Users\Günni\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesApp64.exe
() C:\Windows\system\3DG4me.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Razer USA Ltd) X:\Razer\BlackWidowUltimateTray.exe
() X:\razerhid.exe
(Elaborate Bytes AG) X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
() X:\razertra.exe
(Razer Inc.) X:\razerofa.exe
() X:\vdDaemon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Mozilla Corporation) X:\FireFox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [3DG4me] - C:\Windows\system\3DG4me.exe [126976 2010-04-23] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {42a7f143-391b-11e1-bf8f-806e6f6e6963} - G:\Msetup4.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [Razer Blackwidow Driver] - X:\Razer\BlackWidowUltimateTray.exe [887712 2011-05-16] (Razer USA Ltd)
HKLM-x32\...\Run: [DeathAdder] - X:\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [BCU] - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [375000 2009-10-26] (DeviceVM, Inc.)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9DF1081E30CDCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll (DeviceVM, Inc.)
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {7354E2F6-E1A3-41cf-9368-0E864006166B} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {7354E2F6-E1A3-41cf-9368-0E864006166B} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKCU - {7BE438C0-A634-4214-A63F-EBB13590503C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=8366BB68-F6A6-4A9A-A3C0-7E2C2BF29F82&apn_sauid=3132490E-96F1-4C43-B6E0-2FCB966E32B5
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - X:\Norton360\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default
FF DefaultSearchEngine: Ask.com
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Ask.com
FF Homepage: www.google.de
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - X:\PicasaNew\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\searchplugins\askcom.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: jid0-XqoEmbljazD2VbaY0XOyJcV2E64 - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\jid0-XqoEmbljazD2VbaY0XOyJcV2E64@jetpack.xpi
FF Extension: No Name - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{3e95674b-b98f-4d5c-bcfe-373ebfe39c6e}.xpi
FF Extension: DVDVideoSoft Menu - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: greasemonkey - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: prefs.jsUT        - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{f0c84cc6-a8e6-4591-9982-f94d09b145d9}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF StartMenuInternet: FIREFOX.EXE - X:\FireFox\firefox.exe

==================== Services (Whitelisted) =================

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-06-30] ()
R2 N360; X:\Norton360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-31] ()
R2 TuneUp.UtilitiesSvc; X:\TuneUp2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; X:\Norton360\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-24] (Symantec Corporation)
R1 IDSVia64; X:\Norton360\NortonData\21.1.0.18\Definitions\IPSDefs\20131210.001\IDSvia64.sys [521816 2013-11-22] (Symantec Corporation)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 NAVENG; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131210.024\ENG64.SYS [126040 2013-11-20] (Symantec Corporation)
R3 NAVEX15; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131210.024\EX64.SYS [2099288 2013-11-20] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [154624 2011-05-12] (Razer USA Ltd)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; X:\TuneUp2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
R3 USBADVAU; C:\Windows\System32\drivers\cm11264.sys [1308160 2010-04-23] (C-Media Electronics Inc)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-11 12:26 - 2013-12-11 12:26 - 00016853 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-11 12:25 - 2013-12-11 12:25 - 01928212 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-11 12:25 - 2013-12-11 12:25 - 00000000 ___DC C:\FRST
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:36 - 2013-12-11 11:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:36 - 2013-10-04 03:16 - 00116736 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 11:36 - 2013-10-04 02:36 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 12:53 - 2013-11-04 17:38 - 00820736 ____C C:\Users\Günni\Desktop\pbsetup.exe
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:30 - 2013-12-01 12:10 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-19 21:48 - 2013-11-14 12:56 - 30361888 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 25257248 ____C (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 22951200 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 18208624 ____C (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 17560352 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 15862272 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 12613408 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 21:48 - 2013-11-14 12:56 - 11600432 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 11514624 ____C (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09691888 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09619872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03132704 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03125024 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02947872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02747680 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01884448 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01511712 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01242400 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00707360 ____C (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00657184 ____C (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00609568 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00562464 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00317472 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00266984 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:14 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-11-17 10:51 - 2013-12-11 11:31 - 02105558 ____C C:\Windows\PFRO.log
2013-11-16 16:24 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts SP.lnk
2013-11-16 16:24 - 2013-11-16 16:23 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts MP.lnk
2013-11-16 09:06 - 2013-12-11 11:43 - 00007627 ____C C:\Windows\setupact.log
2013-11-15 18:22 - 2013-10-14 18:00 - 00028368 ____C (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-15 18:20 - 2013-11-15 18:20 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-15 18:20 - 2013-11-15 18:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 18:20 - 2013-11-15 18:20 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 18:20 - 2013-11-15 18:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-15 18:20 - 2013-11-15 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 18:20 - 2013-11-15 18:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-15 18:20 - 2013-11-15 18:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-15 18:20 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-15 18:20 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-15 18:20 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-15 18:20 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-15 18:20 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-15 18:20 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-15 18:20 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-15 18:20 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-15 18:20 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-15 18:20 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-15 18:20 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-15 18:20 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-15 18:20 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-15 18:20 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-15 18:20 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2013-11-15 18:20 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-15 18:20 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-15 18:20 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-15 18:19 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-11-15 18:19 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-11-15 18:19 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-11-15 18:19 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-11-15 18:19 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-11-15 18:19 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-11-15 18:15 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-15 18:15 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2013-11-15 18:15 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-11-15 18:15 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-11-15 17:49 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-15 17:49 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-15 17:49 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-15 17:49 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-15 17:49 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-15 17:49 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-15 17:49 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-15 17:49 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-15 17:49 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-15 17:49 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-15 17:49 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-15 17:49 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-15 17:49 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-15 17:49 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-15 17:49 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-15 17:49 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-15 17:49 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-15 17:49 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-15 17:49 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-15 17:49 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-15 17:49 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-15 17:49 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-15 17:49 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-15 17:49 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-15 17:49 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-15 17:49 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-15 17:49 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-15 17:49 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-15 17:49 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-15 17:49 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

==================== One Month Modified Files and Folders =======

2013-12-11 12:26 - 2013-12-11 12:26 - 00016853 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-11 12:25 - 2013-12-11 12:25 - 01928212 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-11 12:25 - 2013-12-11 12:25 - 00000000 ___DC C:\FRST
2013-12-11 11:49 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-11 11:49 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-11 11:48 - 2012-01-07 20:33 - 00699432 ____C C:\Windows\system32\perfh007.dat
2013-12-11 11:48 - 2012-01-07 20:33 - 00149572 ____C C:\Windows\system32\perfc007.dat
2013-12-11 11:48 - 2009-07-14 06:13 - 01620684 ____C C:\Windows\system32\PerfStringBackup.INI
2013-12-11 11:47 - 2012-01-07 11:39 - 01554435 ____C C:\Windows\WindowsUpdate.log
2013-12-11 11:44 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 11:44 - 2009-07-14 05:45 - 11636928 ____C C:\Windows\system32\FNTCACHE.DAT
2013-12-11 11:43 - 2013-11-16 09:06 - 00007627 ____C C:\Windows\setupact.log
2013-12-11 11:43 - 2013-01-12 12:35 - 00000306 ____C C:\Windows\Tasks\Aegykiny.job
2013-12-11 11:43 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA
2013-12-11 11:43 - 2009-07-14 06:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:38 - 2013-12-11 11:36 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:37 - 2012-01-08 02:14 - 90708896 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 11:32 - 2012-04-09 08:46 - 00000884 ____C C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-11 11:31 - 2013-11-17 10:51 - 02105558 ____C C:\Windows\PFRO.log
2013-12-11 02:00 - 2012-01-14 17:42 - 00000000 ___DC C:\Users\Günni\AppData\Local\Adobe
2013-12-10 19:04 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-10 17:22 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-10 02:17 - 2012-01-07 14:50 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\TS3Client
2013-12-05 17:24 - 2012-01-28 01:17 - 00000000 ___DC C:\Users\Günni\AppData\Local\CrashDumps
2013-12-03 18:14 - 2012-01-14 17:50 - 00000000 ___DC C:\ProgramData\Origin
2013-12-01 12:10 - 2013-11-23 10:30 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-28 21:09 - 2012-01-15 00:07 - 00000000 ___DC C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 20:01 - 2013-10-31 16:15 - 01594028 ____C C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-26 12:33 - 2012-01-14 23:27 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\NVIDIA
2013-11-25 21:22 - 2012-02-28 20:27 - 00001456 ____C C:\Users\Günni\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-11-25 10:35 - 2012-01-07 11:39 - 00000000 ___DC C:\Users\Günni
2013-11-23 11:18 - 2012-01-07 13:56 - 00000000 ___DC C:\Program Files (x86)\Canon
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 11:07 - 2012-01-07 14:00 - 00000000 ___DC C:\ProgramData\CanonIJWSpt
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 __HDC C:\ProgramData\CanonIJScan
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Canon
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:35 - 2009-07-14 06:32 - 00000000 ___DC C:\Windows\system32\FxsTmp
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:19 - 2012-01-07 13:57 - 00000000 ___DC C:\Windows\system32\STRING
2013-11-23 10:19 - 2009-07-14 04:20 - 00000000 _RSDC C:\Windows\Media
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-22 14:16 - 2012-05-06 08:10 - 00003164 ____C C:\Windows\System32\Tasks\Norton WSC Integration
2013-11-22 14:16 - 2012-01-07 14:45 - 00001022 ____C C:\Users\Public\Desktop\Norton 360.lnk
2013-11-22 14:16 - 2012-01-07 14:45 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-11-21 13:20 - 2012-01-07 14:45 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-11-21 13:20 - 2012-01-07 14:45 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-11-21 13:20 - 2012-01-07 14:40 - 00000000 ___DC C:\ProgramData\Norton
2013-11-21 13:14 - 2012-01-07 14:40 - 00000000 ___DC C:\Users\Public\Downloads\Norton
2013-11-19 21:49 - 2012-01-07 12:22 - 00000000 ___DC C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 20:14 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-11-16 16:24 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts SP.lnk
2013-11-16 16:23 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts MP.lnk
2013-11-15 20:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-15 18:54 - 2013-10-31 16:17 - 00001354 ____C C:\Users\Public\Desktop\NVidia Update.lnk
2013-11-15 18:54 - 2013-02-03 21:18 - 00002032 ____C C:\Users\Public\Desktop\AllShare.lnk
2013-11-15 18:54 - 2013-01-25 21:42 - 00001169 ____C C:\Users\Günni\Desktop\TeamViewer 8.lnk
2013-11-15 18:54 - 2012-12-26 15:29 - 00002093 ____C C:\Users\Public\Desktop\Mail.lnk
2013-11-15 18:54 - 2012-10-15 20:29 - 00001246 ____C C:\Users\Günni\Desktop\Free Studio.lnk
2013-11-15 18:54 - 2012-05-11 18:10 - 00002026 ____C C:\Users\Public\Desktop\Adobe Reader.lnk
2013-11-15 18:54 - 2012-02-17 16:44 - 00001631 ____C C:\Users\Public\Desktop\Webcam.lnk
2013-11-15 18:54 - 2012-01-21 18:57 - 00002012 ____C C:\Users\Public\Desktop\Logitech HD.lnk
2013-11-15 18:54 - 2012-01-07 16:48 - 00001831 ____C C:\Users\Public\Desktop\ICQ7.7.lnk
2013-11-15 18:54 - 2012-01-07 16:45 - 00001073 ____C C:\Users\Public\Desktop\VLC.lnk
2013-11-15 18:54 - 2012-01-07 12:16 - 00002048 ____C C:\Users\Public\Desktop\AcerDisplay.lnk
2013-11-15 18:47 - 2012-04-09 08:46 - 00692616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-15 18:47 - 2012-04-09 08:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-15 18:47 - 2012-01-07 12:49 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-15 18:44 - 2012-01-07 16:17 - 00000000 ___DC C:\Users\Günni\AppData\Local\WeGame
2013-11-15 18:24 - 2012-01-07 11:40 - 00001428 ____C C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-15 18:22 - 2009-07-14 04:20 - 00000000 ___DC C:\Windows\PolicyDefinitions
2013-11-15 18:20 - 2013-11-15 18:20 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-15 18:20 - 2013-11-15 18:20 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 18:20 - 2013-11-15 18:20 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 18:20 - 2013-11-15 18:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-15 18:20 - 2013-11-15 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 18:20 - 2013-11-15 18:20 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-15 18:20 - 2013-11-15 18:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-15 18:20 - 2013-11-15 18:20 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 18:20 - 2013-11-15 18:20 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-15 18:18 - 2012-01-07 11:46 - 00000000 ___DC C:\Program Files (x86)\Intel
2013-11-14 12:56 - 2013-11-19 21:48 - 30361888 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 25257248 ____C (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 22951200 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 18208624 ____C (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 17560352 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 15862272 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 12613408 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-19 21:48 - 11600432 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 11514624 ____C (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 09691888 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 09619872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 03132704 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 03125024 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 02947872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 02747680 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 01884448 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 01511712 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 01242400 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00707360 ____C (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00657184 ____C (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00609568 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00562464 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00317472 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-19 21:48 - 00266984 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-10-31 16:14 - 02697248 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-12-04 19:06 - 15218504 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-02-21 22:15 - 01436528 ____C (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-02-21 22:15 - 00168616 ____C (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2012-02-21 22:15 - 00141336 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2012-01-07 12:50 - 18293608 ____C (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-01-07 12:22 - 00023754 ____C C:\Windows\system32\nvinfo.pb
2013-11-14 12:56 - 2012-01-07 12:21 - 03069608 ____C (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-11 16:02 - 2012-01-07 12:22 - 06674208 ____C (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-01-07 12:22 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-02-21 22:15 - 03467927 ____C C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-01-07 12:22 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-01-07 12:22 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-01-07 12:22 - 00219424 ____C (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-01-07 12:22 - 00063776 ____C (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 20:07

==================== End Of Log ============================
--- --- ---




... hatte ja in meinen ersten Thread geschrieben ab 18.30 Uhr abends ... hat sich nun geändert ... habe ab heute dann Urlaub bis Januar ... somit stehe ich zur Verfügung :-) ...
Danke und Grüße :-)

Ps: geile Tatoos!

schrauber 12.12.2013 12:53
Urlaub? Was isn das? :D

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

MaladiA 13.12.2013 12:37
ufffff ok^^ ... werd mir Mühe geben ... wird wohl ein wenig dauern, heute Weihnachtsbaum kaufen, morgen Geburtstag und Sonntag Besuch da ... iwo dazwischen kümmer ich mich um die Hausaufgaben :-) ... vielen Dank ... meld mich sobald ich alles ausgeführt habe!

-----------------------------------------------------
zum Urlaub ....


Urlaub???? weißt du eigentlich, wie wenig du arbeitest? Das Jahr hat doch 365 Tage im Jahr - nicht wahr? Davon schläfst du täglich 8 Stunden, das allein sind 122 Tage. Du hast täglich 8 Stunden frei, das sind nochmals 122 Tage. Es verbleiben: 121 Tage.

52 Sonntage hat das Jahr, es bleiben 69 Tage. Samstags wird nachmittags auch nicht gearbeitet, das sind 52 halbe, oder 26 ganze Tage, bleibt ein Rest von 43 Tagen; Du rechnest doch mit, nicht wahr? Täglich hast du eine Stunde Tischzeit, brauchst jährlich 16 Tage zum Essen. Rest: 27 Tage

Im Jahr hast du dann noch 14 Tage Urlaub, bleiben 13 Tage; und dann hat das Jahr auch noch 12 Feiertage... Und was bleibt übrig?
Sage und schreibe EIN TAG, und das ist dann auch noch der 1. Mai, an dem du auch noch arbeitsfrei hast und da willste noch Urlaub??????????????????
-----------------------------------------------------

Schönes WE!
Grüße Günni

schrauber 13.12.2013 20:31
Zitat:
Davon schläfst du täglich 8 Stunden
5
Zitat:
Du hast täglich 8 Stunden frei
Studium und 2 Nebenjobs, und aktiv an 30 Foren, alleine hier 200 User täglich
Zitat:
52 Sonntage hat das Jahr, es bleiben 69 Tage. Samstags wird nachmittags auch nicht gearbeitet, das sind 52 halbe, oder 26 ganze Tage, bleibt ein Rest von 43 Tagen; Du rechnest doch mit, nicht wahr? Täglich hast du eine Stunde Tischzeit, brauchst jährlich 16 Tage zum Essen. Rest: 27 Tage
Sa und So wird immer gearbeitet, essen dauert 20 min


so und jetzt kommst Du! :D

MaladiA 16.12.2013 10:59
Zitat:
Zitat von schrauber (Beitrag 1212615)
5

Studium und 2 Nebenjobs, und aktiv an 30 Foren, alleine hier 200 User täglich

Sa und So wird immer gearbeitet, essen dauert 20 min


so und jetzt kommst Du! :D
naja den Namen haste dir selbst ausgesucht oder? der sagt alles :-9
... was mich betrift, ich hab Urlaub, reglich verdient!

Mein Hirn ist dauer AFK, es werden nur kurzfristig notwendige Impulse an die Extremitäten gesendet um den Trojaner zu entfernen ... dann wieder Ruhemodus!

Aufgaben erfüllt hoffe ich, hier die Logs:

Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.16.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Günni :: GÜNNI-PC [Administrator]

Schutz: Deaktiviert

16.12.2013 10:33:51
mbam-log-2013-12-16 (10-33-51).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 269597
Laufzeit: 1 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Code:
# AdwCleaner v3.015 - Bericht erstellt am 16/12/2013 um 10:42:03
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Günni - GÜNNI-PC
# Gestartet von : C:\Users\Günni\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : BCUService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Program Files (x86)\DeviceVM
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Günni\AppData\Roaming\dvdvideosoftiehelpers
Datei Gelöscht : C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\searchplugins\Askcom.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Schlüssel Gelöscht : HKCU\Software\DeviceVM
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D793423B-FF18-4A54-B9C9-75B3396BAAC4}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v9.0.1 (de)

[ Datei : C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Ask.com");
Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Ask.com");

*************************

AdwCleaner[R0].txt - [2664 octets] - [16/12/2013 10:41:37]
AdwCleaner[S0].txt - [2542 octets] - [16/12/2013 10:42:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2602 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x64
Ran by Gnni on 16.12.2013 at 10:45:51,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7BE438C0-A634-4214-A63F-EBB13590503C}



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.12.2013 at 10:49:25,12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02
Ran by Günni (administrator) on GÜNNI-PC on 16-12-2013 10:51:07
Running from C:\Users\Günni\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesService64.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesApp64.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Razer USA Ltd) X:\Razer\BlackWidowUltimateTray.exe
() X:\razerhid.exe
(Elaborate Bytes AG) X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe
() X:\razertra.exe
(Razer Inc.) X:\razerofa.exe
() X:\vdDaemon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Microsoft Corporation) C:\Windows\splwow64.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [3DG4me] - C:\Windows\system\3DG4me.exe [126976 2010-04-23] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {42a7f143-391b-11e1-bf8f-806e6f6e6963} - G:\Msetup4.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [Razer Blackwidow Driver] - X:\Razer\BlackWidowUltimateTray.exe [887712 2011-05-16] (Razer USA Ltd)
HKLM-x32\...\Run: [DeathAdder] - X:\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9DF1081E30CDCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll No File
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {7354E2F6-E1A3-41cf-9368-0E864006166B} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - X:\Norton360\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default
FF Homepage: www.google.de
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - X:\PicasaNew\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: jid0-XqoEmbljazD2VbaY0XOyJcV2E64 - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\jid0-XqoEmbljazD2VbaY0XOyJcV2E64@jetpack.xpi
FF Extension: No Name - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{3e95674b-b98f-4d5c-bcfe-373ebfe39c6e}.xpi
FF Extension: DVDVideoSoft Menu - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: greasemonkey - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: prefs.jsUT        - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{f0c84cc6-a8e6-4591-9982-f94d09b145d9}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF StartMenuInternet: FIREFOX.EXE - X:\FireFox\firefox.exe

==================== Services (Whitelisted) =================

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-06-30] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; X:\Norton360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-31] ()
R2 TuneUp.UtilitiesSvc; X:\TuneUp2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; X:\Norton360\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-24] (Symantec Corporation)
R1 IDSVia64; X:\Norton360\NortonData\21.1.0.18\Definitions\IPSDefs\20131213.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131215.005\ENG64.SYS [126040 2013-11-20] (Symantec Corporation)
R3 NAVEX15; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131215.005\EX64.SYS [2099288 2013-11-20] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [154624 2011-05-12] (Razer USA Ltd)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; X:\TuneUp2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
R3 USBADVAU; C:\Windows\System32\drivers\cm11264.sys [1308160 2010-04-23] (C-Media Electronics Inc)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-16 10:51 - 2013-12-16 10:51 - 00016222 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-16 10:50 - 2013-12-16 10:50 - 00000000 ___DC C:\Users\Günni\Downloads\FRST-OlderVersion
2013-12-16 10:49 - 2013-12-16 10:49 - 00000772 ____C C:\Users\Günni\Desktop\JRT.txt
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:43 - 2013-12-16 10:43 - 00002682 ____C C:\Users\Günni\Desktop\AdwCleaner[S0].txt
2013-12-16 10:41 - 2013-12-16 10:42 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:39 - 2013-12-16 10:39 - 01034531 ____C (Thisisu) C:\Users\Günni\Downloads\JRT.exe
2013-12-16 10:38 - 2013-12-16 10:38 - 01226750 ____C C:\Users\Günni\Downloads\adwcleaner.exe
2013-12-16 10:28 - 2013-12-16 10:28 - 00001116 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-16 10:28 - 2013-12-16 10:28 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 10:28 - 2013-04-04 14:50 - 00025928 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 10:12 - 2013-12-16 10:12 - 10285040 ____C (Malwarebytes Corporation                                    ) C:\Users\Günni\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-11 12:25 - 2013-12-16 10:50 - 01927940 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-11 12:25 - 2013-12-16 10:50 - 00000000 ___DC C:\FRST
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:36 - 2013-12-11 11:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:36 - 2013-10-04 03:16 - 00116736 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 11:36 - 2013-10-04 02:36 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 12:53 - 2013-11-04 17:38 - 00820736 ____C C:\Users\Günni\Desktop\pbsetup.exe
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:30 - 2013-12-01 12:10 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-19 21:48 - 2013-11-14 12:56 - 30361888 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 25257248 ____C (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 22951200 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 18208624 ____C (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 17560352 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 15862272 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 12613408 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 21:48 - 2013-11-14 12:56 - 11600432 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 11514624 ____C (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09691888 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09619872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03132704 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03125024 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02947872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02747680 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01884448 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01511712 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01242400 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00707360 ____C (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00657184 ____C (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00609568 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00562464 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00317472 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00266984 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:14 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-11-17 10:51 - 2013-12-16 10:43 - 02648842 ____C C:\Windows\PFRO.log
2013-11-16 16:24 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts SP.lnk
2013-11-16 16:24 - 2013-11-16 16:23 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts MP.lnk
2013-11-16 09:06 - 2013-12-16 10:43 - 00008971 ____C C:\Windows\setupact.log

==================== One Month Modified Files and Folders =======

2013-12-16 10:51 - 2013-12-16 10:51 - 00016222 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-16 10:50 - 2013-12-16 10:50 - 00000000 ___DC C:\Users\Günni\Downloads\FRST-OlderVersion
2013-12-16 10:50 - 2013-12-11 12:25 - 01927940 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-16 10:50 - 2013-12-11 12:25 - 00000000 ___DC C:\FRST
2013-12-16 10:50 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-16 10:50 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-16 10:49 - 2013-12-16 10:49 - 00000772 ____C C:\Users\Günni\Desktop\JRT.txt
2013-12-16 10:49 - 2012-01-07 20:33 - 00699432 ____C C:\Windows\system32\perfh007.dat
2013-12-16 10:49 - 2012-01-07 20:33 - 00149572 ____C C:\Windows\system32\perfc007.dat
2013-12-16 10:49 - 2009-07-14 06:13 - 01620684 ____C C:\Windows\system32\PerfStringBackup.INI
2013-12-16 10:46 - 2013-01-12 12:35 - 00000306 ____C C:\Windows\Tasks\Aegykiny.job
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:43 - 2013-12-16 10:43 - 00002682 ____C C:\Users\Günni\Desktop\AdwCleaner[S0].txt
2013-12-16 10:43 - 2013-11-17 10:51 - 02648842 ____C C:\Windows\PFRO.log
2013-12-16 10:43 - 2013-11-16 09:06 - 00008971 ____C C:\Windows\setupact.log
2013-12-16 10:43 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA
2013-12-16 10:43 - 2009-07-14 06:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2013-12-16 10:42 - 2013-12-16 10:41 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:42 - 2012-01-07 11:39 - 01633792 ____C C:\Windows\WindowsUpdate.log
2013-12-16 10:39 - 2013-12-16 10:39 - 01034531 ____C (Thisisu) C:\Users\Günni\Downloads\JRT.exe
2013-12-16 10:38 - 2013-12-16 10:38 - 01226750 ____C C:\Users\Günni\Downloads\adwcleaner.exe
2013-12-16 10:32 - 2012-04-09 08:46 - 00000884 ____C C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-16 10:28 - 2013-12-16 10:28 - 00001116 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-16 10:28 - 2013-12-16 10:28 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 10:12 - 2013-12-16 10:12 - 10285040 ____C (Malwarebytes Corporation                                    ) C:\Users\Günni\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-16 02:03 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-16 02:00 - 2012-01-14 17:42 - 00000000 ___DC C:\Users\Günni\AppData\Local\Adobe
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-16 01:03 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-15 23:24 - 2012-01-07 14:50 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\TS3Client
2013-12-12 10:22 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 23:27 - 2012-01-28 01:17 - 00000000 ___DC C:\Users\Günni\AppData\Local\CrashDumps
2013-12-11 20:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 14:32 - 2012-04-09 08:46 - 00692616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 14:32 - 2012-04-09 08:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:32 - 2012-01-07 12:49 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 11:44 - 2009-07-14 05:45 - 11636928 ____C C:\Windows\system32\FNTCACHE.DAT
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:38 - 2013-12-11 11:36 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:37 - 2012-01-08 02:14 - 90708896 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-03 18:14 - 2012-01-14 17:50 - 00000000 ___DC C:\ProgramData\Origin
2013-12-01 12:10 - 2013-11-23 10:30 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-28 21:09 - 2012-01-15 00:07 - 00000000 ___DC C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 20:01 - 2013-10-31 16:15 - 01594028 ____C C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-26 12:33 - 2012-01-14 23:27 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\NVIDIA
2013-11-25 21:22 - 2012-02-28 20:27 - 00001456 ____C C:\Users\Günni\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-11-25 10:35 - 2012-01-07 11:39 - 00000000 ___DC C:\Users\Günni
2013-11-23 11:18 - 2012-01-07 13:56 - 00000000 ___DC C:\Program Files (x86)\Canon
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 11:07 - 2012-01-07 14:00 - 00000000 ___DC C:\ProgramData\CanonIJWSpt
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 __HDC C:\ProgramData\CanonIJScan
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Canon
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:35 - 2009-07-14 06:32 - 00000000 ___DC C:\Windows\system32\FxsTmp
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:19 - 2012-01-07 13:57 - 00000000 ___DC C:\Windows\system32\STRING
2013-11-23 10:19 - 2009-07-14 04:20 - 00000000 _RSDC C:\Windows\Media
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-22 14:16 - 2012-05-06 08:10 - 00003164 ____C C:\Windows\System32\Tasks\Norton WSC Integration
2013-11-22 14:16 - 2012-01-07 14:45 - 00001022 ____C C:\Users\Public\Desktop\Norton 360.lnk
2013-11-22 14:16 - 2012-01-07 14:45 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-11-21 13:20 - 2012-01-07 14:45 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-11-21 13:20 - 2012-01-07 14:45 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-11-21 13:20 - 2012-01-07 14:40 - 00000000 ___DC C:\ProgramData\Norton
2013-11-21 13:14 - 2012-01-07 14:40 - 00000000 ___DC C:\Users\Public\Downloads\Norton
2013-11-19 21:49 - 2012-01-07 12:22 - 00000000 ___DC C:\Program Files (x86)\NVIDIA Corporation
2013-11-19 20:14 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-11-16 16:24 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts SP.lnk
2013-11-16 16:23 - 2013-11-16 16:24 - 00001438 ____C C:\Users\Günni\Desktop\Ghosts MP.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 20:07

==================== End Of Log ============================
--- --- ---


INFO: wärend ADW Cleaner auf der Suche war, hat sich mein Norton 360 eingeklingt, sagte hat iwas entdeckt und entfernt, ging aber alles zu schnell für mich um sagen zu können was es genau war ...

Schöne Woche!
Grüße Günni

schrauber 16.12.2013 19:10

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

MaladiA 17.12.2013 18:06
huhu schrauber,

also hier die Auswertungen der letzten Aufgaben ...

Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=a6d71122785e5249b26035ad93180bbe
# engine=16298
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-17 03:04:09
# local_time=2013-12-17 04:04:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3592 16777213 100 88 538343 137955145 0 0
# compatibility_mode=5893 16776574 100 94 13385496 138922499 0 0
# scanned=353723
# found=0
# cleaned=0
# scan_time=6148
Code:
Results of screen317's Security Check version 0.99.77 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Security Center service is not running! This report may not be accurate!
Norton 360   
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Call of Duty: Ghosts 
 Call of Duty: Ghosts - Multiplayer
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 TuneUp Utilities 2012 
 TuneUp Utilities Language Pack (de-DE)
 Java 7 Update 45 
 Adobe Flash Player 11.9.900.170 
 Adobe Reader 10.1.8 Adobe Reader out of Date! 
 Mozilla Firefox (9.0.1)
 Mozilla Thunderbird (17.0.8)
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes' Anti-Malware mbamscheduler.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 01
Ran by Günni (administrator) on GÜNNI-PC on 17-12-2013 17:51:35
Running from C:\Users\Günni\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Windows\system\3DG4me.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesService64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesApp64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Razer USA Ltd) X:\Razer\BlackWidowUltimateTray.exe
() X:\razerhid.exe
(Elaborate Bytes AG) X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe
() X:\razertra.exe
(Razer Inc.) X:\razerofa.exe
() X:\vdDaemon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Microsoft Corporation) C:\Windows\splwow64.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [3DG4me] - C:\Windows\system\3DG4me.exe [126976 2010-04-23] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [Razer Blackwidow Driver] - X:\Razer\BlackWidowUltimateTray.exe [887712 2011-05-16] (Razer USA Ltd)
HKLM-x32\...\Run: [DeathAdder] - X:\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9DF1081E30CDCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll No File
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {7354E2F6-E1A3-41cf-9368-0E864006166B} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - X:\Norton360\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default
FF Homepage: www.google.de
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - X:\PicasaNew\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: jid0-XqoEmbljazD2VbaY0XOyJcV2E64 - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\jid0-XqoEmbljazD2VbaY0XOyJcV2E64@jetpack.xpi
FF Extension: No Name - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{3e95674b-b98f-4d5c-bcfe-373ebfe39c6e}.xpi
FF Extension: DVDVideoSoft Menu - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: greasemonkey - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: prefs.jsUT        - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{f0c84cc6-a8e6-4591-9982-f94d09b145d9}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF StartMenuInternet: FIREFOX.EXE - X:\FireFox\firefox.exe

==================== Services (Whitelisted) =================

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-06-30] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; X:\Norton360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-31] ()
R2 TuneUp.UtilitiesSvc; X:\TuneUp2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; X:\Norton360\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-24] (Symantec Corporation)
R1 IDSVia64; X:\Norton360\NortonData\21.1.0.18\Definitions\IPSDefs\20131216.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 NAVENG; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131216.038\ENG64.SYS [126040 2013-11-20] (Symantec Corporation)
S3 NAVEX15; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131216.038\EX64.SYS [2099288 2013-11-20] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [154624 2011-05-12] (Razer USA Ltd)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; X:\TuneUp2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
R3 USBADVAU; C:\Windows\System32\drivers\cm11264.sys [1308160 2010-04-23] (C-Media Electronics Inc)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-17 17:51 - 2013-12-17 17:51 - 00016552 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-17 17:51 - 2013-12-17 17:51 - 00001155 ____C C:\Users\Günni\Desktop\checkup SC.txt
2013-12-16 13:25 - 2013-10-30 18:03 - 00039200 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-16 13:25 - 2013-10-30 18:02 - 00032544 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-16 10:50 - 2013-12-17 17:51 - 00000000 ___DC C:\Users\Günni\Downloads\FRST-OlderVersion
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:41 - 2013-12-16 10:42 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:28 - 2013-12-16 10:28 - 00001116 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-16 10:28 - 2013-12-16 10:28 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 10:28 - 2013-04-04 14:50 - 00025928 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-11 12:25 - 2013-12-17 17:51 - 01928078 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-11 12:25 - 2013-12-17 17:51 - 00000000 ___DC C:\FRST
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:36 - 2013-12-11 11:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:36 - 2013-10-04 03:16 - 00116736 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 11:36 - 2013-10-04 02:36 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 12:53 - 2013-11-04 17:38 - 00820736 ____C C:\Users\Günni\Desktop\pbsetup.exe
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:30 - 2013-12-01 12:10 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-19 21:48 - 2013-11-14 12:56 - 30361888 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 25257248 ____C (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 22951200 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 18208624 ____C (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 17560352 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 15862272 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 12613408 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 21:48 - 2013-11-14 12:56 - 11600432 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 11514624 ____C (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09691888 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09619872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03132704 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03125024 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02947872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02747680 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01884448 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01511712 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01242400 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00707360 ____C (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00657184 ____C (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00609568 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00562464 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00317472 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00266984 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:14 - 2013-12-16 13:26 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-11-17 10:51 - 2013-12-17 17:42 - 02813494 ____C C:\Windows\PFRO.log

==================== One Month Modified Files and Folders =======

2013-12-17 17:51 - 2013-12-17 17:51 - 00016552 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-17 17:51 - 2013-12-17 17:51 - 00001155 ____C C:\Users\Günni\Desktop\checkup SC.txt
2013-12-17 17:51 - 2013-12-16 10:50 - 00000000 ___DC C:\Users\Günni\Downloads\FRST-OlderVersion
2013-12-17 17:51 - 2013-12-11 12:25 - 01928078 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-17 17:51 - 2013-12-11 12:25 - 00000000 ___DC C:\FRST
2013-12-17 17:50 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-17 17:50 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-17 17:47 - 2012-01-07 20:33 - 00699432 ____C C:\Windows\system32\perfh007.dat
2013-12-17 17:47 - 2012-01-07 20:33 - 00149572 ____C C:\Windows\system32\perfc007.dat
2013-12-17 17:47 - 2009-07-14 06:13 - 01620684 ____C C:\Windows\system32\PerfStringBackup.INI
2013-12-17 17:46 - 2012-01-07 11:39 - 01677607 ____C C:\Windows\WindowsUpdate.log
2013-12-17 17:43 - 2013-11-16 09:06 - 00010082 ____C C:\Windows\setupact.log
2013-12-17 17:43 - 2013-01-12 12:35 - 00000306 ____C C:\Windows\Tasks\Aegykiny.job
2013-12-17 17:43 - 2009-07-14 06:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2013-12-17 17:42 - 2013-11-17 10:51 - 02813494 ____C C:\Windows\PFRO.log
2013-12-17 17:42 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA
2013-12-17 17:32 - 2012-04-09 08:46 - 00000884 ____C C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-17 02:00 - 2012-01-14 17:42 - 00000000 ___DC C:\Users\Günni\AppData\Local\Adobe
2013-12-16 19:15 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-16 13:26 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-12-16 13:26 - 2013-11-02 12:53 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA
2013-12-16 13:26 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA Corporation
2013-12-16 13:25 - 2012-01-07 12:22 - 00000000 ___DC C:\Program Files (x86)\NVIDIA Corporation
2013-12-16 13:25 - 2012-01-07 12:20 - 00000000 ___DC C:\Program Files\NVIDIA Corporation
2013-12-16 13:14 - 2012-01-28 01:17 - 00000000 ___DC C:\Users\Günni\AppData\Local\CrashDumps
2013-12-16 12:17 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:42 - 2013-12-16 10:41 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:28 - 2013-12-16 10:28 - 00001116 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-16 10:28 - 2013-12-16 10:28 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-15 23:24 - 2012-01-07 14:50 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\TS3Client
2013-12-12 10:22 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 20:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 14:32 - 2012-04-09 08:46 - 00692616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 14:32 - 2012-04-09 08:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:32 - 2012-01-07 12:49 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 11:44 - 2009-07-14 05:45 - 11636928 ____C C:\Windows\system32\FNTCACHE.DAT
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:38 - 2013-12-11 11:36 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:37 - 2012-01-08 02:14 - 90708896 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-03 18:14 - 2012-01-14 17:50 - 00000000 ___DC C:\ProgramData\Origin
2013-12-01 12:10 - 2013-11-23 10:30 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-29 17:56 - 2013-10-31 16:17 - 01096480 ____C (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-10-31 16:17 - 00979744 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 21:09 - 2012-01-15 00:07 - 00000000 ___DC C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 20:01 - 2013-10-31 16:15 - 01594028 ____C C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-26 12:33 - 2012-01-14 23:27 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\NVIDIA
2013-11-25 21:22 - 2012-02-28 20:27 - 00001456 ____C C:\Users\Günni\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-11-25 10:35 - 2012-01-07 11:39 - 00000000 ___DC C:\Users\Günni
2013-11-23 11:18 - 2012-01-07 13:56 - 00000000 ___DC C:\Program Files (x86)\Canon
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 11:07 - 2012-01-07 14:00 - 00000000 ___DC C:\ProgramData\CanonIJWSpt
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 __HDC C:\ProgramData\CanonIJScan
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Canon
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:35 - 2009-07-14 06:32 - 00000000 ___DC C:\Windows\system32\FxsTmp
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:19 - 2012-01-07 13:57 - 00000000 ___DC C:\Windows\system32\STRING
2013-11-23 10:19 - 2009-07-14 04:20 - 00000000 _RSDC C:\Windows\Media
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-22 14:16 - 2012-05-06 08:10 - 00003164 ____C C:\Windows\System32\Tasks\Norton WSC Integration
2013-11-22 14:16 - 2012-01-07 14:45 - 00001022 ____C C:\Users\Public\Desktop\Norton 360.lnk
2013-11-22 14:16 - 2012-01-07 14:45 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-11-21 13:20 - 2012-01-07 14:45 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-11-21 13:20 - 2012-01-07 14:45 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-11-21 13:20 - 2012-01-07 14:40 - 00000000 ___DC C:\ProgramData\Norton
2013-11-21 13:14 - 2012-01-07 14:40 - 00000000 ___DC C:\Users\Public\Downloads\Norton

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 20:07

==================== End Of Log ============================
--- --- ---

--- --- ---



... also alle bisherigen Versuche über google waren super, keine Weiterleitungen mehr, geht auch alles nen Tick schneller ... ob das System wirklich sauber ist kannst jedoch nur du beantworten, scheint aber so anhand der Logs oder?

Hab mal bei Norton nachgeschaut was er da entfernt hat wärend ADW Cleaner gesucht hat (wie in der letzten Mail erwähnt) ... laut Log war es die "Souspicious.Cloud.9" - keine Ahnung - steht jedenfals unter "Isoliert" - seltsam das er die nicht vorher gefunden hat, war ja nirgendwo am surfen, hatte nur ADW am suchen ...


Fragen:

Malewarebytes ist als einziges Program von allen noch auf dem Rechner, sollte ichs behalten?
Gibts iwelche Probleme in zusammenarbeit mit Norton 360 von denen man weiß?

Möchte 2014 sowieso auf Kaspersky umsteigen, hab gehört ist weniger Systembelastend als Norton 360 (was anscheinend mehr Resourcen verbraucht) - was würdest du empfehlen?

Andere Anregungen von deiner Seite aus? Bin über jede Info dankbar!

Vielen Dank, schönen Abend noch!
Gruß Günni

schrauber 18.12.2013 10:25
Adobe updaten.

Zitat:
Malewarebytes ist als einziges Program von allen noch auf dem Rechner, sollte ichs behalten?
Gibts iwelche Probleme in zusammenarbeit mit Norton 360 von denen man weiß?
Kannste behalten, MBAm läuft in der Free Version eh ohne Echtzeitschutz.

Zitat:
Möchte 2014 sowieso auf Kaspersky umsteigen, hab gehört ist weniger Systembelastend als Norton 360 (was anscheinend mehr Resourcen verbraucht) - was würdest du empfehlen?
Emsisoft :)



Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.



MaladiA 18.12.2013 11:21
huhu schrauber, hier die .txt wie gewünscht ...

Code:
Farbar Service Scanner Version: 05-12-2013
Ran by Günni (administrator) on 18-12-2013 at 11:19:09
Running from "C:\Users\Günni\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is set to Disabled. The default start type is Auto.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Disabled. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
Adobe updaten: ist mir auch aufgefallen im Log, ... sollte eigentlich ein autoupdate eingestellt sein!
Bisher hat sich Adobe immer selbst geupt ... manuelle updatesuche eingeleitet ... es heißt dann "ist aktuell"! Keine Ahnung :-)

... macht mir ein wenig Sorgen, das du nichts zum "PC ist sauber?" gesagt hast :-))) ... iwelche Bedenken?
Wie gesagt, keine auffälligen Dinge mehr wärend des surfens. Gab es schon Rückfälle mit ihavenet?

Wofür brauch ich dann Maleware wenn es kein echtZSchutz hat, kann ich da was sinnvolles einstellen? Kann mich aber hierzu auch einlesen, kein Problem.

Emsisoft also ... ein schweizer Hersteller? :-) ... ich weiß nicht eh, die Schweizer ... gibts da gute Erfahrungen mit dem Produkt, bennutzt ihr das? Hab gelesen hat den VirenAward 2014 abgeräumt,
aber kenn mich da nicht wirklich gut aus, würde sicher deinem Rat folgen wollen. Wenn dann sowieso nur die kostenpflichtige Vollversion oder? Kaspersky nicht mehr vorne mit dabei?

Grüße Günni, bleib hart und steif!
http://www.t-ocker.de/assets/images/30sw.JPG

schrauber 19.12.2013 09:57
Ds ist Österreich, nicht Schweiz ;)

die räumen alles ab was es an Preisen gibt, ich empfehle es immer und nutze es selbst.

Noch schnell nen kaputten Dienst fixen, dann sind wir durch.


Downloade dir bitte Windows Repair (All In One) von hier.


Frisches FSS und FRST logfile bitte.

MaladiA 19.12.2013 12:18
huhu, alles durchgeführt, wurde auch ohne Probleme ausgeführt ... allerdings gibts wohl ne neue Version von Windows Repair (v.2.1.0) .... hab über die Weiterleitung aber keine 64bit Version gefunden, also deinen Link / deine Version verwendet ...

Code:
Farbar Service Scanner Version: 05-12-2013
Ran by Günni (administrator) on 19-12-2013 at 12:14:11
Running from "C:\Users\Günni\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is set to Disabled. The default start type is Auto.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Disabled. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05
Ran by Günni (administrator) on GÜNNI-PC on 19-12-2013 12:14:40
Running from C:\Users\Günni\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\system\3DG4me.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Razer USA Ltd) X:\Razer\BlackWidowUltimateTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() X:\razerhid.exe
(Elaborate Bytes AG) X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() X:\razertra.exe
(Razer Inc.) X:\razerofa.exe
() X:\vdDaemon.exe
(Symantec Corporation) X:\Norton360\Engine\21.1.0.18\N360.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TuneUp Software) X:\TuneUp2012\TuneUpUtilitiesApp64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) X:\FireFox\firefox.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [3DG4me] - C:\Windows\system\3DG4me.exe [126976 2010-04-23] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [Razer Blackwidow Driver] - X:\Razer\BlackWidowUltimateTray.exe [887712 2011-05-16] (Razer USA Ltd)
HKLM-x32\...\Run: [DeathAdder] - X:\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - X:\CloneDrive\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9DF1081E30CDCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} -  No File
URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} -  No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {7354E2F6-E1A3-41cf-9368-0E864006166B} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - X:\Norton360\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - X:\Norton360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default
FF Homepage: www.google.de
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - X:\PicasaNew\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: ProxTube - Unblock YouTube - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: EmblemBF Import and Export - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\jid0-XqoEmbljazD2VbaY0XOyJcV2E64@jetpack.xpi
FF Extension: {3e95674b-b98f-4d5c-bcfe-373ebfe39c6e} - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{3e95674b-b98f-4d5c-bcfe-373ebfe39c6e}.xpi
FF Extension: NoScript - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Greasemonkey - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: Video DivX Compiler Pro - C:\Users\Günni\AppData\Roaming\Mozilla\Firefox\Profiles\xl3g10tr.default\Extensions\{f0c84cc6-a8e6-4591-9982-f94d09b145d9}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - X:\Adobe MC\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF StartMenuInternet: FIREFOX.EXE - X:\FireFox\firefox.exe

==================== Services (Whitelisted) =================

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-06-30] ()
R2 N360; X:\Norton360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-31] ()
R2 TuneUp.UtilitiesSvc; X:\TuneUp2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; X:\Norton360\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)
R1 IDSVia64; X:\Norton360\NortonData\21.1.0.18\Definitions\IPSDefs\20131218.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 NAVENG; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131218.002\ENG64.SYS [126040 2013-11-20] (Symantec Corporation)
R3 NAVEX15; X:\Norton360\NortonData\21.1.0.18\Definitions\VirusDefs\20131218.002\EX64.SYS [2099288 2013-11-20] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [154624 2011-05-12] (Razer USA Ltd)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; X:\TuneUp2012\TuneUpUtilitiesDriver64.sys [11856 2011-12-12] (TuneUp Software)
R3 USBADVAU; C:\Windows\System32\drivers\cm11264.sys [1308160 2010-04-23] (C-Media Electronics Inc)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-19 12:14 - 2013-12-19 12:14 - 00015966 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-19 12:14 - 2013-12-19 12:14 - 00002718 ____C C:\Users\Günni\Downloads\FSS.txt
2013-12-19 12:11 - 2013-12-19 12:11 - 02192805 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-19 12:11 - 2013-12-19 12:11 - 00708597 ____C (Farbar) C:\Users\Günni\Downloads\FSS.exe
2013-12-19 12:01 - 2013-12-19 12:05 - 00181064 ____C (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-19 11:45 - 2013-12-19 11:45 - 00006712 ____N C:\bootsqm.dat
2013-12-19 11:37 - 2011-10-24 13:35 - 00000000 ___DC C:\Users\Günni\Downloads\Tweaking.com - Windows Repair
2013-12-18 14:05 - 2013-12-05 09:42 - 00039200 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-18 14:05 - 2013-12-05 09:42 - 00032544 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:41 - 2013-12-16 10:42 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-11 12:25 - 2013-12-17 17:51 - 00000000 ___DC C:\FRST
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:37 - 2013-12-11 11:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:37 - 2013-12-11 11:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:37 - 2013-12-11 11:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:37 - 2013-12-11 11:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:36 - 2013-12-11 11:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:36 - 2013-12-11 11:37 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:36 - 2013-12-11 11:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:36 - 2013-10-04 03:16 - 00116736 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 11:36 - 2013-10-04 02:36 - 00230400 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 12:53 - 2013-11-04 17:38 - 00820736 ____C C:\Users\Günni\Desktop\pbsetup.exe
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:30 - 2013-12-01 12:10 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-19 21:48 - 2013-11-14 12:56 - 30361888 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 25257248 ____C (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 22951200 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 18208624 ____C (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 17560352 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 15862272 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 12613408 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 21:48 - 2013-11-14 12:56 - 11600432 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 11514624 ____C (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09691888 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 09619872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03132704 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 03125024 ____C (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02947872 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 02747680 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01884448 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01511712 ____C (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 01242400 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00707360 ____C (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00657184 ____C (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00609568 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00562464 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00317472 ____C (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 21:48 - 2013-11-14 12:56 - 00266984 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:14 - 2013-12-16 13:26 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation

==================== One Month Modified Files and Folders =======

2013-12-19 12:14 - 2013-12-19 12:14 - 00015966 ____C C:\Users\Günni\Downloads\FRST.txt
2013-12-19 12:14 - 2013-12-19 12:14 - 00002718 ____C C:\Users\Günni\Downloads\FSS.txt
2013-12-19 12:12 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 12:12 - 2009-07-14 05:45 - 00018816 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 12:11 - 2013-12-19 12:11 - 02192805 ____C (Farbar) C:\Users\Günni\Downloads\FRST64.exe
2013-12-19 12:11 - 2013-12-19 12:11 - 00708597 ____C (Farbar) C:\Users\Günni\Downloads\FSS.exe
2013-12-19 12:11 - 2012-01-07 20:33 - 00699432 ____C C:\Windows\system32\perfh007.dat
2013-12-19 12:11 - 2012-01-07 20:33 - 00149572 ____C C:\Windows\system32\perfc007.dat
2013-12-19 12:11 - 2009-07-14 06:13 - 01620684 ____C C:\Windows\system32\PerfStringBackup.INI
2013-12-19 12:08 - 2012-01-07 11:39 - 01732751 ____C C:\Windows\WindowsUpdate.log
2013-12-19 12:07 - 2013-11-17 10:51 - 03061598 ____C C:\Windows\PFRO.log
2013-12-19 12:07 - 2013-11-16 09:06 - 00011809 ____C C:\Windows\setupact.log
2013-12-19 12:07 - 2013-01-12 12:35 - 00000306 ____C C:\Windows\Tasks\Aegykiny.job
2013-12-19 12:07 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA
2013-12-19 12:07 - 2009-07-14 06:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2013-12-19 12:05 - 2013-12-19 12:01 - 00181064 ____C (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-19 11:45 - 2013-12-19 11:45 - 00006712 ____N C:\bootsqm.dat
2013-12-19 02:00 - 2012-01-14 17:42 - 00000000 ___DC C:\Users\Günni\AppData\Local\Adobe
2013-12-19 01:32 - 2012-04-09 08:46 - 00000884 ____C C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 22:29 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-18 21:59 - 2012-01-14 18:54 - 00214392 ____C C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-18 18:14 - 2012-01-28 01:17 - 00000000 ___DC C:\Users\Günni\AppData\Local\CrashDumps
2013-12-18 17:55 - 2012-01-07 14:50 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\TS3Client
2013-12-17 17:51 - 2013-12-11 12:25 - 00000000 ___DC C:\FRST
2013-12-16 13:26 - 2013-11-19 20:14 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA Corporation
2013-12-16 13:26 - 2013-11-02 12:53 - 00000000 ___DC C:\Users\Günni\AppData\Local\NVIDIA
2013-12-16 13:26 - 2012-01-07 12:22 - 00000000 ___DC C:\ProgramData\NVIDIA Corporation
2013-12-16 13:25 - 2012-01-07 12:22 - 00000000 ___DC C:\Program Files (x86)\NVIDIA Corporation
2013-12-16 13:25 - 2012-01-07 12:20 - 00000000 ___DC C:\Program Files\NVIDIA Corporation
2013-12-16 10:45 - 2013-12-16 10:45 - 00000000 ___DC C:\Windows\ERUNT
2013-12-16 10:42 - 2013-12-16 10:41 - 00000000 ___DC C:\AdwCleaner
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Malwarebytes
2013-12-16 10:13 - 2013-12-16 10:13 - 00000000 ___DC C:\ProgramData\Malwarebytes
2013-12-16 01:51 - 2013-12-16 01:51 - 00007602 ____C C:\Users\Günni\AppData\Local\Resmon.ResmonCfg
2013-12-12 10:22 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 20:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-11 14:32 - 2012-04-09 08:46 - 00692616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 14:32 - 2012-04-09 08:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:32 - 2012-01-07 12:49 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 11:44 - 2009-07-14 05:45 - 11636928 ____C C:\Windows\system32\FNTCACHE.DAT
2013-12-11 11:38 - 2013-12-11 11:38 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:38 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 11:38 - 2013-12-11 11:38 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 11:38 - 2013-12-11 11:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 11:38 - 2013-12-11 11:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 11:38 - 2013-12-11 11:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 11:38 - 2013-12-11 11:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 11:38 - 2013-12-11 11:36 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 11:38 - 2013-12-11 11:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 11:37 - 2013-12-11 11:36 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 11:37 - 2013-12-11 11:36 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 11:37 - 2012-01-08 02:14 - 90708896 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-10 03:13 - 2013-10-31 16:17 - 01100248 ____C (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-12-10 03:13 - 2013-10-31 16:17 - 00982232 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-12-05 09:42 - 2013-12-18 14:05 - 00039200 ____C (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-05 09:42 - 2013-12-18 14:05 - 00032544 ____C (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-05 09:42 - 2013-10-31 16:14 - 00035104 ____C (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-12-03 18:14 - 2012-01-14 17:50 - 00000000 ___DC C:\ProgramData\Origin
2013-12-01 12:10 - 2013-11-23 10:30 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2013-11-28 21:09 - 2012-01-15 00:07 - 00000000 ___DC C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 20:01 - 2013-10-31 16:15 - 01594028 ____C C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-26 12:33 - 2012-01-14 23:27 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\NVIDIA
2013-11-25 21:22 - 2012-02-28 20:27 - 00001456 ____C C:\Users\Günni\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-11-25 10:35 - 2012-01-07 11:39 - 00000000 ___DC C:\Users\Günni
2013-11-23 11:18 - 2012-01-07 13:56 - 00000000 ___DC C:\Program Files (x86)\Canon
2013-11-23 11:10 - 2013-11-23 11:10 - 00000000 ___DC C:\ProgramData\CanonIJPLM
2013-11-23 11:07 - 2012-01-07 14:00 - 00000000 ___DC C:\ProgramData\CanonIJWSpt
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 __HDC C:\ProgramData\CanonIJScan
2013-11-23 10:51 - 2012-06-19 15:33 - 00000000 ___DC C:\Users\Günni\AppData\Roaming\Canon
2013-11-23 10:49 - 2013-11-23 10:49 - 00000000 __HDC C:\ProgramData\CanonIJQuickMenu
2013-11-23 10:35 - 2009-07-14 06:32 - 00000000 ___DC C:\Windows\system32\FxsTmp
2013-11-23 10:29 - 2013-11-23 10:29 - 00000000 __HDC C:\ProgramData\CanonIJEGV
2013-11-23 10:19 - 2012-01-07 13:57 - 00000000 ___DC C:\Windows\system32\STRING
2013-11-23 10:19 - 2009-07-14 04:20 - 00000000 _RSDC C:\Windows\Media
2013-11-23 10:07 - 2013-11-23 10:07 - 00003826 ____C C:\Users\Günni\Documents\G
2013-11-22 14:21 - 2013-11-22 14:21 - 00000000 ___DC C:\Windows\System32\Tasks\Norton 360
2013-11-22 14:16 - 2012-05-06 08:10 - 00003164 ____C C:\Windows\System32\Tasks\Norton WSC Integration
2013-11-22 14:16 - 2012-01-07 14:45 - 00001022 ____C C:\Users\Public\Desktop\Norton 360.lnk
2013-11-22 14:16 - 2012-01-07 14:45 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-11-21 13:20 - 2012-01-07 14:45 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-11-21 13:20 - 2012-01-07 14:45 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-11-21 13:20 - 2012-01-07 14:40 - 00000000 ___DC C:\ProgramData\Norton
2013-11-21 13:14 - 2012-01-07 14:40 - 00000000 ___DC C:\Users\Public\Downloads\Norton

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 20:07

==================== End Of Log ============================
--- --- ---


... schönen Tag noch!
Grüße Günni


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:47 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19