Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Trojaner im "Temp-Ordner"? (https://www.trojaner-board.de/146164-trojaner-temp-ordner.html)

Vrenice 15.12.2013 20:15
Trojaner im "Temp-Ordner"?
 
Hallo zusammen,

mein Name ist Philipp und ich benötige Rat, denn seit einigen Monaten sind mir diverse, komische Sachen aufgefallen.

Ich habe keinen Tower sondern ein "HP-Probook 4730s", was sich eigentlich sehen lassen kann, doch es ist leistungstechnisch teilweise nicht voll da.
Erst meldete sich mein Virenscanner (Symantec Endpoint Protection) und meinte es wären sämtliche Dateien innerhalb meines temporären Ordners (%temp%) befallen. Ich habe den Ordner geöffnet und hunderte Dateien wie "DWH1B20.temp" gefunden.
Symantec hat die Dateien mit dem Risikotypen "Suspicious.MH690" in der Quarantäne gelistet.

Löschen kann ich Dateien mit Symantec nicht, somit im Ordner markiert und manuell gelöscht, doch nach fünf Minuten waren sie wieder alle da^^.

Ich hab das schon 10x probiert, doch es hat alles nichts geholfen...

Ich brauche Hilfe, weil ich einfach nicht mehr weiter weiss und keine Lust habe, dass da unbefugt an meinem PC gefummelt wird.

Ich bin über jede hilfreiche Antwort dankbar und wenn ihr Logfiles braucht, dann beschreibt mir kurz, welche und wie ich die mache.

Viele Grüße,
Philipp :rolleyes:

cosinus 15.12.2013 20:22
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Vrenice 15.12.2013 20:55
Hi cosinus,

danke erstmal für die kurze Anleitung! :dankeschoen:

FRST:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01
Ran by Philipp (administrator) on KONSTANZ on 15-12-2013 20:30:34
Running from C:\Users\Philipp\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Symantec Corporation) C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\DWHWizrd.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-04-29] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011824 2013-01-29] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\RunOnce: [NCPluginUpdater] - "c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe" Update [21720 2013-11-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Philipp\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-04] (Spotify Ltd)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-13] (Advanced Micro Devices, Inc.)
HKU\Gast\...\Run: [Facebook Update] - "C:\Users\Philipp\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\Gast\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung)
HKU\Gast\...\Run: [KiesHelper] - C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
HKU\Gast\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-03-20] (Samsung Electronics)
HKU\Gast\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd)
HKU\Gast\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe"  /MINIMIZED
HKU\Gast\...\RunOnce: [FlashPlayerUpdate] - C:\windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe -update activex
Lsa: [Notification Packages] DPPassFilter scecli
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/de/de/business/security_response/index.jsp
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/de/de/business/security_response/index.jsp
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {82A946F9-D715-42C0-A6D4-CF3FE9FD2BCB} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {9A17B9E1-E88D-4878-8BD0-8833CB6FE055} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL =
SearchScopes: HKCU - {FB1CE1E3-F1B6-4365-BE8D-16FEC5B3C90E} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {FD4253B9-9C7E-4445-AB92-C2E118AAEF9D} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
Toolbar: HKLM-x32 - No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {BAD4FE2C-503B-45CC-88CD-4B0574057D11} hxxp://clients.futuremark.com/calico/systeminfodeploy/Futuremark_SystemInfo_4_19_133.cab
DPF: HKLM-x32 {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default
FF Homepage: hxxp://www.t-online.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "hxxp://www.t-online.de/"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Desktop) - C:\Users\Philipp\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (TV) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh\1.0.12_0
CHR Extension: (Brushed) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg\1.0_0
CHR Extension: (Snooker) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjohiacoelemalmancnccjggomjnkfod\1.0.2_0
CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Pool) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cedbddnnmhgnedpamoenmdkhnpnfbpjb\1.0.4_0
CHR Extension: (Adblock Plus) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (AdBlock) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 ccEvtMgr; C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [108392 2010-01-25] (Symantec Corporation)
R2 ccSetMgr; C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [108392 2010-01-25] (Symantec Corporation)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [486224 2011-11-10] (DigitalPersona, Inc.)
S4 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [476728 2011-09-05] (Hewlett-Packard Company)
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [166112 2013-09-05] (Futuremark)
S3 LiveUpdate; C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_3.EXE [3093880 2010-02-17] (Symantec Corporation)
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1323008 2012-04-05] ()
R2 PnkBstrA; C:\windows\SysWow64\PnkBstrA.exe [76888 2013-11-25] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S4 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
R2 SmcService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe [3218880 2010-04-16] (Symantec Corporation)
S4 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE [419656 2010-04-01] (Symantec Corporation)
R2 Symantec AntiVirus; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe [1831024 2010-04-23] (Symantec Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-09-19] (TuneUp Software)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-09-14] (Qualcomm Atheros)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-08-20] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 FsUsbExDisk; C:\windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [100808 2012-04-05] (McAfee, Inc.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158920 2012-04-05] (McAfee, Inc.)
R3 NAVENG; C:\ProgramData\Symantec\Definitions\VirusDefs\20131214.005\eng64.sys [126040 2013-09-13] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Symantec\Definitions\VirusDefs\20131214.005\ex64.sys [2099288 2013-09-13] (Symantec Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2012-08-20] ()
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-12-31] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-08-20] (Duplex Secure Ltd.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2611704 2011-01-12] (Sunplus Technology)
R1 SRTSP; C:\Windows\System32\Drivers\SRTSP64.SYS [447536 2010-03-08] (Symantec Corporation)
R1 SRTSP; C:\Windows\SysWow64\Drivers\SRTSP64.SYS [447536 2010-03-08] (Symantec Corporation)
S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL64.SYS [482352 2010-03-08] (Symantec Corporation)
S3 SRTSPL; C:\Windows\SysWow64\Drivers\SRTSPL64.SYS [482352 2010-03-08] (Symantec Corporation)
R1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX64.SYS [32304 2010-03-08] (Symantec Corporation)
R1 SRTSPX; C:\Windows\SysWow64\Drivers\SRTSPX64.SYS [32304 2010-03-08] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [172592 2011-11-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software)
U3 ahexpnfa; C:\Windows\System32\Drivers\ahexpnfa.sys [0 ] (Advanced Micro Devices)
S3 ALSysIO; \??\C:\Users\Philipp\AppData\Local\Temp\ALSysIO64.sys [x]
S3 ARCVCAM; system32\DRIVERS\ArcSoftVCapture.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-05] (Microsoft Corporation)
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
S3 xhunter1; \??\C:\windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 20:30 - 2013-12-15 20:31 - 00021480 _____ C:\Users\Philipp\Downloads\FRST.txt
2013-12-15 20:29 - 2013-12-15 20:29 - 00390007 _____ C:\Users\Philipp\Desktop\Symantec Log.csv
2013-12-15 20:29 - 2013-12-15 20:29 - 00000000 ____D C:\FRST
2013-12-15 20:27 - 2013-12-15 20:28 - 01927796 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setuperr.log
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setupact.log
2013-12-15 18:50 - 2013-12-15 18:51 - 33893112 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe
2013-12-14 11:48 - 2013-12-14 12:24 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-14 11:48 - 2013-12-14 11:48 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-12-14 11:46 - 2013-12-14 11:46 - 00614784 _____ C:\Users\Philipp\Downloads\SpeedFan - CHIP-Downloader.exe
2013-12-13 23:35 - 2013-12-13 23:35 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Need for Speed World
2013-12-13 22:52 - 2013-12-13 22:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Electronic_Arts_Inc
2013-12-13 22:46 - 2013-12-13 22:48 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-11 17:04 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-11 17:04 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-11 17:04 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-11 17:04 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-11 16:56 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-11 16:56 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-11 16:56 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-11 16:56 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-11 16:56 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-11 16:56 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-11 16:56 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-11 16:56 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-11 16:56 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-11 16:56 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-11 16:56 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-11 16:56 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-11 16:56 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-11 16:56 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-11 16:56 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-11 16:56 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-11 16:56 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-11 16:56 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-11 16:55 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-11 16:55 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-11 16:55 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-11 16:55 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-11 16:55 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-11 16:55 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-11 16:55 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-11 16:55 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-11 16:55 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-11 16:55 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-11 16:55 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-11 16:55 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-11 16:55 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-11 16:46 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-11 16:46 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-11 16:46 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-11 16:46 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-11 16:46 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-11 16:46 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-11 16:46 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-11 16:46 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-11 16:46 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-11 16:46 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-11 16:46 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-11 16:46 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-11 16:46 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-11 16:46 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-11 16:46 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-11 16:46 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-11 16:46 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-11 16:46 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-11 16:46 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-08 19:27 - 2013-12-12 19:27 - 00003198 _____ C:\windows\System32\Tasks\HPCeeScheduleForPhilipp
2013-12-08 19:27 - 2013-12-12 19:27 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForPhilipp.job
2013-12-08 17:58 - 2013-12-08 17:58 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_enu.exe
2013-12-08 17:51 - 2013-12-08 17:51 - 00000000 ____D C:\windows\ERUNT
2013-12-08 17:40 - 2013-12-08 17:40 - 01110034 _____ C:\Users\Philipp\Downloads\adwcleaner.exe
2013-12-08 17:30 - 2013-12-08 17:30 - 00033644 _____ C:\ComboFix.txt
2013-12-08 16:51 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2013-12-08 16:51 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2013-12-08 16:51 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2013-12-08 16:49 - 2013-12-08 17:30 - 00000000 ____D C:\Qoobox
2013-12-08 16:48 - 2013-12-08 17:29 - 00000000 ____D C:\windows\erdnt
2013-12-08 16:47 - 2013-12-08 16:47 - 05153293 ____R (Swearware) C:\Users\Philipp\Downloads\ComboFix.exe
2013-12-07 22:36 - 2013-12-07 22:36 - 00614784 _____ C:\Users\Philipp\Downloads\Slender The Eight Pages - CHIP-Downloader.exe
2013-12-03 20:24 - 2013-12-03 20:24 - 00001041 _____ C:\Users\Public\Desktop\ManyCam.lnk
2013-12-03 20:22 - 2013-12-03 20:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\mystart_ad
2013-12-02 20:35 - 2013-12-02 20:36 - 00000000 ____D C:\Users\Philipp\AppData\Local\PAYDAY
2013-12-02 20:29 - 2013-12-02 20:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-28 19:11 - 2013-11-28 19:11 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(2).exe
2013-11-28 19:08 - 2013-11-28 19:08 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(1).exe
2013-11-28 19:05 - 2013-11-28 19:06 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-11-25 18:45 - 2013-12-15 18:54 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-25 18:42 - 2013-11-25 18:43 - 29709992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeMP4VideoConverter.exe
2013-11-25 17:40 - 2013-11-25 17:40 - 00001282 _____ C:\Users\Philipp\Desktop\Origin.lnk
2013-11-25 17:26 - 2013-11-25 17:26 - 03820448 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_129.exe
2013-11-25 17:20 - 2013-11-25 17:20 - 00000000 ____D C:\ProgramData\EA Core
2013-11-25 02:34 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2013-11-25 02:34 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_7.dll
2013-11-25 02:34 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_4.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_4.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_7.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_7.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_5.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_5.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_5.dll
2013-11-25 02:31 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_3.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_42.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_2.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_2.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_5.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_5.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_2.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_2.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_1.dll
2013-11-25 02:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_2.dll
2013-11-24 17:05 - 2013-11-25 17:20 - 00000000 ____D C:\Users\Philipp\AppData\Local\Origin
2013-11-24 17:03 - 2013-12-14 15:06 - 00000000 ____D C:\Program Files (x86)\Origin
2013-11-24 17:02 - 2013-11-24 17:02 - 16959688 _____ (Electronic Arts, Inc.) C:\Users\Philipp\Downloads\OriginThinSetup_9.2.1.4399.exe
2013-11-20 19:44 - 2013-11-20 19:44 - 00000000 ____D C:\ProgramData\EmailNotifier
2013-11-20 19:41 - 2013-11-20 19:42 - 15246704 _____ (ManyCam LLC) C:\Users\Philipp\Downloads\ManyCamSetup.exe
2013-11-19 15:12 - 2013-11-19 15:12 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\2K Sports
2013-11-16 22:17 - 2013-12-12 18:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 22:17 - 2013-11-16 22:17 - 00001111 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-16 22:14 - 2013-11-16 22:14 - 00283184 _____ (Mozilla) C:\Users\Philipp\Downloads\Firefox Setup Stub 25.0.1.exe
2013-11-16 14:35 - 2013-12-08 17:43 - 00000000 ____D C:\AdwCleaner

==================== One Month Modified Files and Folders =======

2013-12-15 20:31 - 2013-12-15 20:30 - 00021480 _____ C:\Users\Philipp\Downloads\FRST.txt
2013-12-15 20:29 - 2013-12-15 20:29 - 00390007 _____ C:\Users\Philipp\Desktop\Symantec Log.csv
2013-12-15 20:29 - 2013-12-15 20:29 - 00000000 ____D C:\FRST
2013-12-15 20:28 - 2013-12-15 20:27 - 01927796 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setuperr.log
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setupact.log
2013-12-15 19:59 - 2011-12-26 11:54 - 00000000 ____D C:\Users\Philipp\AppData\Local\CrashDumps
2013-12-15 19:45 - 2011-12-25 20:13 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Skype
2013-12-15 19:43 - 2012-12-23 19:36 - 00000000 ____D C:\Users\Philipp\Documents\VirtualDJ
2013-12-15 19:37 - 2012-11-17 18:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-15 19:33 - 2011-12-31 12:20 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log
2013-12-15 19:32 - 2013-01-20 13:29 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-12-15 19:24 - 2011-08-15 22:46 - 01117218 _____ C:\windows\WindowsUpdate.log
2013-12-15 18:54 - 2013-11-25 18:45 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-12-15 18:54 - 2012-05-25 21:59 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\DVDVideoSoft
2013-12-15 18:51 - 2013-12-15 18:50 - 33893112 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe
2013-12-15 16:18 - 2012-08-21 18:47 - 00107832 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-12-15 16:17 - 2013-05-04 19:27 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-15 14:42 - 2012-08-21 18:47 - 00282296 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-12-15 14:42 - 2012-08-21 18:47 - 00282296 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-12-15 14:16 - 2009-07-14 05:45 - 00020720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:16 - 2009-07-14 05:45 - 00020720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 14:05 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-14 23:30 - 2012-12-28 18:38 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify
2013-12-14 22:56 - 2012-12-28 18:38 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify
2013-12-14 22:20 - 2012-01-13 21:25 - 00003938 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{9E8426AC-DAA3-4B7B-9619-BD432B7F36E0}
2013-12-14 16:45 - 2011-11-08 19:26 - 00000000 ____D C:\windows\rescache
2013-12-14 15:06 - 2013-11-24 17:03 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-14 12:24 - 2013-12-14 11:48 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-14 11:48 - 2013-12-14 11:48 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-12-14 11:46 - 2013-12-14 11:46 - 00614784 _____ C:\Users\Philipp\Downloads\SpeedFan - CHIP-Downloader.exe
2013-12-13 23:35 - 2013-12-13 23:35 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Need for Speed World
2013-12-13 22:52 - 2013-12-13 22:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Electronic_Arts_Inc
2013-12-13 22:51 - 2013-04-28 19:06 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-12-13 22:48 - 2013-12-13 22:46 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-13 21:17 - 2013-02-12 20:00 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-12-13 19:22 - 2012-11-17 18:58 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 19:22 - 2012-09-20 16:49 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 19:22 - 2011-11-18 10:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-12 19:27 - 2013-12-08 19:27 - 00003198 _____ C:\windows\System32\Tasks\HPCeeScheduleForPhilipp
2013-12-12 19:27 - 2013-12-08 19:27 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForPhilipp.job
2013-12-12 18:02 - 2013-11-16 22:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-11 20:24 - 2013-04-28 19:17 - 00000000 ____D C:\ProgramData\Origin
2013-12-11 20:24 - 2011-12-26 14:25 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-11 19:17 - 2012-11-01 15:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-11 17:34 - 2011-05-03 19:08 - 00716194 _____ C:\windows\system32\perfh007.dat
2013-12-11 17:34 - 2011-05-03 19:08 - 00156752 _____ C:\windows\system32\perfc007.dat
2013-12-11 17:34 - 2009-07-14 06:13 - 01660510 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-11 17:27 - 2013-01-09 22:05 - 00423912 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-11 17:03 - 2011-11-18 08:59 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 16:53 - 2013-07-19 16:24 - 00000000 ____D C:\windows\system32\MRT
2013-12-11 16:49 - 2011-11-18 09:17 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-09 19:12 - 2011-11-08 10:32 - 00000000 ____D C:\Users\Philipp
2013-12-09 19:10 - 2009-07-14 03:34 - 95805440 _____ C:\windows\system32\config\SOFTWARE_tureg_old
2013-12-09 19:10 - 2009-07-14 03:34 - 22020096 _____ C:\windows\system32\config\SYSTEM_tureg_old
2013-12-09 19:10 - 2009-07-14 03:34 - 00028672 _____ C:\windows\system32\config\SECURITY_tureg_old
2013-12-09 19:05 - 2009-07-14 03:34 - 00483328 _____ C:\windows\system32\config\DEFAULT_tureg_old
2013-12-09 19:05 - 2009-07-14 03:34 - 00106496 _____ C:\windows\system32\config\SAM_tureg_old
2013-12-08 17:58 - 2013-12-08 17:58 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_enu.exe
2013-12-08 17:51 - 2013-12-08 17:51 - 00000000 ____D C:\windows\ERUNT
2013-12-08 17:43 - 2013-11-16 14:35 - 00000000 ____D C:\AdwCleaner
2013-12-08 17:43 - 2013-01-10 21:43 - 00001116 _____ C:\Users\Philipp\Desktop\Internet Explorer (2).lnk
2013-12-08 17:43 - 2012-12-26 23:03 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-12-08 17:43 - 2012-09-02 17:33 - 00000000 ____D C:\windows\System32\Tasks\NCH Software
2013-12-08 17:43 - 2012-02-14 14:06 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4
2013-12-08 17:43 - 2011-11-08 11:40 - 00001146 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 17:43 - 2011-11-08 11:40 - 00000000 ___RD C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 17:40 - 2013-12-08 17:40 - 01110034 _____ C:\Users\Philipp\Downloads\adwcleaner.exe
2013-12-08 17:30 - 2013-12-08 17:30 - 00033644 _____ C:\ComboFix.txt
2013-12-08 17:30 - 2013-12-08 16:49 - 00000000 ____D C:\Qoobox
2013-12-08 17:30 - 2013-07-28 13:08 - 00000000 ____D C:\Users\TEMP.Konstanz
2013-12-08 17:29 - 2013-12-08 16:48 - 00000000 ____D C:\windows\erdnt
2013-12-08 17:25 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2013-12-08 17:07 - 2009-07-14 03:34 - 96993280 _____ C:\windows\system32\config\software.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 22020096 _____ C:\windows\system32\config\system.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00524288 _____ C:\windows\system32\config\default.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00106496 _____ C:\windows\system32\config\sam.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00028672 _____ C:\windows\system32\config\security.bak
2013-12-08 16:47 - 2013-12-08 16:47 - 05153293 ____R (Swearware) C:\Users\Philipp\Downloads\ComboFix.exe
2013-12-07 23:41 - 2013-05-28 12:22 - 00000000 ____D C:\Users\Philipp\Desktop\Ordner
2013-12-07 22:36 - 2013-12-07 22:36 - 00614784 _____ C:\Users\Philipp\Downloads\Slender The Eight Pages - CHIP-Downloader.exe
2013-12-03 20:24 - 2013-12-03 20:24 - 00001041 _____ C:\Users\Public\Desktop\ManyCam.lnk
2013-12-03 20:24 - 2013-08-27 17:14 - 00000000 ____D C:\Program Files (x86)\ManyCam
2013-12-03 20:22 - 2013-12-03 20:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\mystart_ad
2013-12-03 17:57 - 2011-05-03 18:49 - 01638534 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-02 20:36 - 2013-12-02 20:35 - 00000000 ____D C:\Users\Philipp\AppData\Local\PAYDAY
2013-12-02 20:29 - 2013-12-02 20:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-01 20:25 - 2012-03-15 20:03 - 00000000 ____D C:\windows\Minidump
2013-12-01 14:22 - 2013-05-16 14:42 - 00003696 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-28 19:11 - 2013-11-28 19:11 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(2).exe
2013-11-28 19:08 - 2013-11-28 19:08 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(1).exe
2013-11-28 19:06 - 2013-11-28 19:05 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-11-26 21:47 - 2011-11-08 10:31 - 00003218 _____ C:\windows\System32\Tasks\HPCeeScheduleForKONSTANZ$
2013-11-26 21:47 - 2011-11-08 10:31 - 00000342 _____ C:\windows\Tasks\HPCeeScheduleForKONSTANZ$.job
2013-11-26 12:54 - 2013-12-11 16:56 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-11 16:56 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-11 16:56 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-11 16:55 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-11 16:56 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-11 16:56 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-11 16:55 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-11 16:56 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-11 16:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-11 16:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-11 16:56 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-11 16:56 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-11 16:56 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-11 16:56 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-11 16:56 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-11 16:56 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-11-26 09:38 - 2013-12-11 16:55 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-11-26 09:35 - 2013-12-11 16:55 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-11 16:56 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-11 16:56 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 16:55 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-11 16:55 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-11 16:55 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-11 16:55 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 16:55 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-11 16:55 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-11 16:55 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-11 16:56 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-11 16:56 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 16:55 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-11 16:55 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-11-25 18:43 - 2013-11-25 18:42 - 29709992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeMP4VideoConverter.exe
2013-11-25 18:39 - 2012-12-12 19:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-25 18:39 - 2011-08-15 23:11 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 18:34 - 2013-10-25 18:50 - 00000000 ____D C:\Users\Philipp\Documents\Bandicam
2013-11-25 17:47 - 2012-08-21 18:47 - 00076888 _____ C:\windows\SysWOW64\PnkBstrA.exe
2013-11-25 17:40 - 2013-11-25 17:40 - 00001282 _____ C:\Users\Philipp\Desktop\Origin.lnk
2013-11-25 17:27 - 2012-08-20 19:06 - 00000000 ____D C:\Users\Philipp\AppData\Local\PunkBuster
2013-11-25 17:26 - 2013-11-25 17:26 - 03820448 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_129.exe
2013-11-25 17:20 - 2013-11-25 17:20 - 00000000 ____D C:\ProgramData\EA Core
2013-11-25 17:20 - 2013-11-24 17:05 - 00000000 ____D C:\Users\Philipp\AppData\Local\Origin
2013-11-24 17:06 - 2013-04-28 19:17 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Origin
2013-11-24 17:02 - 2013-11-24 17:02 - 16959688 _____ (Electronic Arts, Inc.) C:\Users\Philipp\Downloads\OriginThinSetup_9.2.1.4399.exe
2013-11-23 19:26 - 2013-12-11 16:46 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-11 16:46 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-11-21 17:48 - 2013-10-27 23:28 - 00000000 ____D C:\Users\Philipp\AppData\Local\PMB Files
2013-11-21 17:48 - 2013-10-27 23:28 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-21 17:12 - 2013-08-27 17:15 - 00000000 ____D C:\Users\Philipp\AppData\Local\ManyCam
2013-11-20 19:44 - 2013-11-20 19:44 - 00000000 ____D C:\ProgramData\EmailNotifier
2013-11-20 19:43 - 2011-11-08 11:42 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Mozilla
2013-11-20 19:42 - 2013-11-20 19:41 - 15246704 _____ (ManyCam LLC) C:\Users\Philipp\Downloads\ManyCamSetup.exe
2013-11-20 19:28 - 2011-12-24 22:35 - 00000000 ____D C:\Users\Philipp\AppData\Local\Adobe
2013-11-19 15:12 - 2013-11-19 15:12 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\2K Sports
2013-11-17 17:25 - 2012-02-17 14:25 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\XnView
2013-11-17 16:29 - 2012-09-19 18:58 - 00000000 ____D C:\Users\Philipp\AppData\Local\Mozilla
2013-11-17 12:41 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-11-16 22:24 - 2012-12-26 23:02 - 00001128 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002UA.job
2013-11-16 22:24 - 2012-12-26 23:02 - 00001076 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002Core.job
2013-11-16 22:21 - 2012-12-26 23:02 - 00004118 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002UA
2013-11-16 22:21 - 2012-12-26 23:02 - 00003722 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002Core
2013-11-16 22:17 - 2013-11-16 22:17 - 00001111 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-16 22:14 - 2013-11-16 22:14 - 00283184 _____ (Mozilla) C:\Users\Philipp\Downloads\Firefox Setup Stub 25.0.1.exe
2013-11-15 20:34 - 2012-12-31 14:31 - 00002778 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2013-11-15 20:33 - 2009-07-27 16:04 - 00000000 ____D C:\windows\Panther

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-11 17:57

==================== End Of Log ============================
--- --- ---


Addition:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2013 01
Ran by Philipp at 2013-12-15 20:32:23
Running from C:\Users\Philipp\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Symantec Endpoint Protection (Enabled - Up to date) {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Symantec Endpoint Protection (Enabled - Up to date) {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

==================== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 3 (SP3) (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.05) (x32 Version: 11.0.05)
AMD APP SDK Runtime (Version: 2.5.793.1)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Media Foundation Decoders (Version: 1.0.61013.1636)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ASIO4ALL (x32 Version: 2.11 Beta1)
Bandicam (x32)
Bandisoft MPEG-1 Decoder (x32)
Bink and Smacker (x32)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.1013.1702.28713)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1013.1702.28713)
Catalyst Control Center Localization All (x32 Version: 2011.1013.1702.28713)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.1013.1702.28713)
CCC Help Chinese Standard (x32 Version: 2011.1013.1701.28713)
CCC Help Chinese Traditional (x32 Version: 2011.1013.1701.28713)
CCC Help Czech (x32 Version: 2011.1013.1701.28713)
CCC Help Danish (x32 Version: 2011.1013.1701.28713)
CCC Help Dutch (x32 Version: 2011.1013.1701.28713)
CCC Help English (x32 Version: 2011.1013.1701.28713)
CCC Help Finnish (x32 Version: 2011.1013.1701.28713)
CCC Help French (x32 Version: 2011.1013.1701.28713)
CCC Help German (x32 Version: 2011.1013.1701.28713)
CCC Help Greek (x32 Version: 2011.1013.1701.28713)
CCC Help Hungarian (x32 Version: 2011.1013.1701.28713)
CCC Help Italian (x32 Version: 2011.1013.1701.28713)
CCC Help Japanese (x32 Version: 2011.1013.1701.28713)
CCC Help Korean (x32 Version: 2011.1013.1701.28713)
CCC Help Norwegian (x32 Version: 2011.1013.1701.28713)
CCC Help Polish (x32 Version: 2011.1013.1701.28713)
CCC Help Portuguese (x32 Version: 2011.1013.1701.28713)
CCC Help Russian (x32 Version: 2011.1013.1701.28713)
CCC Help Spanish (x32 Version: 2011.1013.1701.28713)
CCC Help Swedish (x32 Version: 2011.1013.1701.28713)
CCC Help Thai (x32 Version: 2011.1013.1701.28713)
CCC Help Turkish (x32 Version: 2011.1013.1701.28713)
ccc-utility64 (Version: 2011.1013.1702.28713)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
CVE-2012-4969
D3DX10 (x32 Version: 15.4.2368.0902)
Device Access Manager for HP ProtectTools (Version: 6.1.0.1)
DiRT 3 (x32)
Drive Encryption For HP ProtectTools (Version: 6.0.99.30652)
Energy Star Digital Logo (x32 Version: 1.0.1)
F1 2011 (x32 Version: 1.0.0000.129)
F1 2011 (x32 Version: 1.0.0002.129)
Face Recognition for HP ProtectTools (Version: 6.00.4407)
File Sanitizer For HP ProtectTools (x32 Version: 6.0.0.8)
FL Studio 11 (x32)
FL Studio 8 (x32)
FlowStone FL 3.0 (x32)
Fraps (remove only) (x32)
Free Audio Converter version 5.0.23.320 (x32 Version: 5.0.23.320)
Free MP4 Video Converter version 5.0.30.1029 (x32 Version: 5.0.30.1029)
Free YouTube to MP3 Converter version 3.12.17.1127 (x32 Version: 3.12.17.1127)
Futuremark SystemInfo (x32 Version: 4.20.168)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (HKCU Version: 30.0.1599.101)
Google Update Helper (x32 Version: 1.3.23.0)
Grand Theft Auto IV (x32 Version: 1.0.0011.131)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)
HP 3D DriveGuard (Version: 4.1.14.1)
HP Auto (Version: 1.0.12494.3472)
HP Connection Manager (x32 Version: 4.1.10.1)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP ESU for Microsoft Windows 7 (x32 Version: 2.0.8.1)
HP HD Webcam [Fixed] (x32 Version: 3.3.4.07)
HP Power Assistant (Version: 2.1.0.6)
HP Product Detection (x32 Version: 11.15.0009)
HP ProtectTools Security Manager (Version: 6.08.1017)
HP QuickWeb (x32 Version: 3.0.3.9925)
HP Setup (x32 Version: 8.5.4526.3645)
HP SoftPaq Download Manager (x32 Version: 3.4.10.0)
HP Software Framework (x32 Version: 4.6.10.1)
HP Software Setup (x32 Version: 8.2.1.1)
HP Support Assistant (x32 Version: 7.0.39.15)
HP System Default Settings (x32 Version: 2.4.3.1)
HP Wallpaper (x32 Version: 2.00)
IDT Audio (x32 Version: 1.0.6428.0)
IL Download Manager (x32)
IL Shared Libraries (x32)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004)
Internet Explorer (x32 Version: 9)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)
iTunes (Version: 11.1.2.32)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 35 (x32 Version: 6.0.350)
JMicron Flash Media Controller Driver (x32 Version: 1.0.72.4)
League of Legends (x32 Version: 3.0.1)
LEGO MINDSTORMS NXT - English Language Pack (x32 Version: 1.1.100.0)
LEGO MINDSTORMS NXT Driver for x64 (Version: 1.16.769)
LEGO MINDSTORMS NXT Migration Package (x32 Version: 1.2.8.0)
LiveUpdate 3.3 (Symantec Corporation) (x32 Version: 3.3.0.96)
ManyCam 3.1.62 (x32 Version: 3.1.62)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Windows Performance Toolkit (Version: 4.8.0)
Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.30514)
Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.7600.0.30514)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Microsoft_VC90_CRT_x86 (x32 Version: 1.0.0)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML4 Parser (x32 Version: 1.0.0)
Native Instruments DrumMicA (Version: 1.0.0.002)
Native Instruments Kontakt 5 (Version: 5.2.0.6361)
Native Instruments Service Center (Version: 2.4.1.1158)
NBA 2K14 (x32)
Need for Speed™ SHIFT (x32 Version: 1.0.0.0)
Need For Speed™ World (x32 Version: 1.0.0.0)
NVIDIA PhysX (x32 Version: 9.12.0613)
OpenAL (x32)
Origin (x32 Version: 9.2.1.4399)
Pando Media Booster (x32 Version: 2.6.0.7)
Privacy Manager for HP ProtectTools (Version: 6.00.831)
PX Profile Update (x32 Version: 1.00.1.)
Python 2.6.3 (64-bit) (Version: 2.6.3150)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.209)
Qualcomm Atheros Driver Installation Program (x32 Version: 10.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
RaceRoom Racing Experience  (x32)
RaceRoom Racing Experience Launcher (x32 Version: 1.0)
Rapture3D 2.4.8 Game (x32)
Realtek Ethernet Controller All-In-One Windows Driver (x32 Version: 7.58.411.2012)
Samsung Kies (x32 Version: 2.3.2.12054_20)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.29.0)
SDK (x32 Version: 2.26.012)
SFPack (x32)
Skype™ 6.11 (x32 Version: 6.11.102)
Spotify (HKCU Version: 0.9.6.81.gd359a796)
Star Wars JK II Jedi Outcast (x32)
Steam (x32 Version: 1.0.0.0)
Steinberg VST Classics 1 64bit (Version: 1.0.0)
Symantec Endpoint Protection (Version: 11.0.6005.562)
Synaptics Pointing Device Driver (Version: 16.3.9.0)
SyncerSoft Analog Nexus VSTi (x32)
System Requirements Lab CYRI (x32 Version: 6.0.8.0)
TeamSpeak 3 Client (HKCU Version: 3.0.13.1)
TeamViewer 8 (x32 Version: 8.0.22298)
Theft Recovery for HP ProtectTools (x32 Version: 6.0.37.0)
Toxic Biohazard (x32)
TuneUp Utilities 2013 (x32 Version: 13.0.2020.4)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.2020.4)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Validity Fingerprint Sensor Driver (Version: 4.4.228.0)
Vember Audio SURGE Demo (x32)
VIP Access SDK (1.0.1.5)  (x32 Version: 1.0.1.5)
VirtualDJ Home FREE (x32 Version: 7.4)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
WinRAR 4.11 (64-bit) (Version: 4.11.0)
XnView 1.98.5 (x32 Version: 1.98.5)
Xobni Core (x32 Version: 1.0.0)
Zattoo4 4.0.5 (x32 Version: 4.0.5)

==================== Restore Points  =========================

11-12-2013 19:18:22 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-12-08 17:25 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {019AEF57-8526-479E-895D-DDF94B85B0B5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-11-27] (Microsoft)
Task: {0E5777D5-E03A-4CE4-9AE2-DC444AD6227D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [2012-09-27] (Hewlett-Packard Company)
Task: {18A06B05-CF3E-403A-A2EA-8F82643C6484} - System32\Tasks\Löschen von %Temp% => C:\Users\Philipp\Desktop\Ordner\Temp del.bat [2013-06-29] ()
Task: {1D4647FC-58FD-455A-9752-15B81D559DEA} - System32\Tasks\{7D68E53D-8FD3-457B-B1F9-2009347680CB} => C:\Users\Philipp\Desktop\pagedfrg.exe
Task: {1E62715A-AF86-46B5-ACF7-DF416D7CD922} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-25] ()
Task: {1FC44286-0FC8-4B5C-AF8D-7237B15F5468} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {2CCE79AE-E9ED-4611-B0A7-D2C95829CDAC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {405C412B-6A08-44B8-BE8E-11D94F24BC24} - System32\Tasks\HPCeeScheduleForKONSTANZ$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {5C291850-0468-490C-A252-A930266CDCF4} - System32\Tasks\{27A036E7-3098-4987-A3B0-0466A2937311} => G:\launcher.exe
Task: {5C5FB127-72CF-4808-98F0-ECFD082F949F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {6055D066-C84A-4579-98D1-86E429A06751} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2012-09-19] (TuneUp Software)
Task: {62DCCFE6-F99B-482E-9BDE-BD203C64877A} - System32\Tasks\Google Updater and Installer => C:\Users\Philipp\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-26] (Google Inc.)
Task: {6D542EDD-12C4-4984-99B1-21175D679D5B} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\Autoupdate.exe [2013-08-14] ()
Task: {7552C452-326C-4EE6-83D9-7EFA38CB0953} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002UA => C:\Users\Philipp\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-26] (Google Inc.)
Task: {786E277E-FF8D-4674-9B8E-0F8781E6E956} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002Core => C:\Users\Philipp\AppData\Local\Google\Update\GoogleUpdate.exe [2012-12-26] (Google Inc.)
Task: {7EC744EE-38B8-421D-B257-29069DC4B942} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
Task: {99144F44-0F43-4F24-A323-3B8802A361B0} - \NCH Software\videopadShakeIcon No Task File
Task: {9A86B572-F42F-47C1-9077-A98DBA3B3658} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {A42E8D8E-5A20-4163-8E8D-D74E93D0B750} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-20] (Hewlett-Packard Company)
Task: {A986F2DB-7F1C-418F-A2FA-4745CA2755F1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13] (Adobe Systems Incorporated)
Task: {C44A1992-D5FE-4BE8-A3EC-02868BDAD6E8} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {CD0153F9-B00E-4263-BC58-4A0C7E65014C} - System32\Tasks\HPCeeScheduleForPhilipp => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {ECCC66B5-768C-4DCB-A70B-6FA0EBFB3D1C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {FEAEAD27-1C62-4A06-B2D2-2B349B742F6B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002Core.job => C:\Users\Philipp\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2191092014-2934982546-3609317016-1002UA.job => C:\Users\Philipp\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForKONSTANZ$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\windows\Tasks\HPCeeScheduleForPhilipp.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2011-11-18 10:47 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2013-05-31 22:03 - 2013-03-25 09:57 - 00721917 _____ () C:\windows\SysWOW64\AiCM64.dll
2011-01-27 06:11 - 2011-01-27 06:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-10-15 12:32 - 2013-10-15 12:32 - 00012520 _____ () C:\Users\Philipp\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll
2013-10-15 12:32 - 2013-10-15 12:32 - 00015080 _____ () C:\Users\Philipp\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll
2013-10-15 12:32 - 2013-10-15 12:32 - 00014056 _____ () C:\Users\Philipp\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll
2011-10-13 15:01 - 2011-10-13 15:01 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-11-09 08:55 - 2011-11-09 08:55 - 00016384 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-11-02 13:03 - 2011-11-02 13:03 - 00024576 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2012-04-05 17:17 - 2012-04-05 17:17 - 02830336 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcEncryptionProviderPlugin.dll
2012-04-05 16:40 - 2012-04-05 16:40 - 00126976 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface.dll
2012-04-05 17:20 - 2012-04-05 17:20 - 02863104 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpDpHostPlugin.dll
2012-04-05 17:18 - 2012-04-05 17:18 - 00053248 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalATASec4SATA.dll
2012-04-05 16:44 - 2012-04-05 16:44 - 02035712 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeCoreEncryptionPlugin.dll
2012-04-05 16:45 - 2012-04-05 16:45 - 01945600 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeProductDetectionPlugin.dll
2012-04-05 17:15 - 2012-04-05 17:15 - 03092480 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalEncryptionProviderPlugin.dll
2013-08-15 16:55 - 2013-08-15 16:55 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-08-15 22:49 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-03-25 13:23 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-04-19 12:10 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-03-26 15:16 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2009-02-26 13:46 - 2009-02-26 13:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 11:46 - 2011-06-22 11:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2013-11-16 22:17 - 2013-12-11 19:17 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:07BF512B

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccEvtMgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccSetMgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SmcService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Symantec Antivirus => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2013 08:33:28 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWHE4EB.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:33:03 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH58C2.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:32:32 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH1FA7.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:32:08 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWHC0C5.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:31:33 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH5F34.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:31:04 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWHC05.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:30:34 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWHB7CD.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:29:53 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH1D80.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:29:27 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH4AA7.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.

Error: (12/15/2013 08:29:01 PM) (Source: Symantec AntiVirus) (User: )
Description: Sicherheitsrisiko gefunden!Suspicious.MH690 in Datei: C:\Users\Philipp\AppData\Local\Temp\DWH891C.tmp von: Auto-Protect-Scan.  Aktion: Isolieren erfolgreich : Zugriff verweigert.  Beschreibung der Aktion: Die Datei wurde erfolgreich isoliert.


System errors:
=============
Error: (12/15/2013 07:47:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:47:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (12/15/2013 07:32:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-12-15 20:29:53.875
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:23:53.090
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:18:18.366
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:10:28.157
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:09:49.415
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:01:51.068
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 20:01:28.449
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 19:50:10.832
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 19:46:28.973
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-15 19:45:38.754
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 59%
Total physical RAM: 4030.36 MB
Available physical RAM: 1638.57 MB
Total Pagefile: 8058.9 MB
Available Pagefile: 5165.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:573.08 GB) (Free:229.3 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:17.8 GB) (Free:2.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.12 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: F2D83907)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Active) - (Size=300 MB) - (Type=42)
Partition 3: (Not Active) - (Size=573 GB) - (Type=42)
Partition 4: (Not Active) - (Size=23 GB) - (Type=42)

==================== End Of Log ============================
Die Symantec-Datei kann ich nicht hochladen, höchstens einen Screenshot^^

Vrenice 15.12.2013 21:22
Liste der Anhänge anzeigen (Anzahl: 1)
Hier noch der Screenshot :zunge:

cosinus 15.12.2013 21:23
Zitat:
Die Symantec-Datei kann ich nicht hochladen, höchstens einen Screenshot^^
Dann bitte per Screenshot :)



Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Vrenice 16.12.2013 18:26
Danke dir für die schnelle Hilfe, da das ganze sicherlich Zeit brauch, werde ich mich morgen erneut melden.

Viele Grüße,
Philipp

So, nachdem der Kollege 1 1/2 Stunden lief, stand am Ende "No Maleware found".

Find ich fragwürdig :wtf:

Das Logfile:
Code:
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

Java version: 1.6.0_35

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.294000 GHz
Memory total: 4226138112, free: 1591287808

=======================================


---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

Java version: 1.6.0_35

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.294000 GHz
Memory total: 4226138112, free: 1660370944

Downloaded database version: v2013.12.15.06
Downloaded database version: v2013.10.11.02
=======================================
Initializing...
------------ Kernel report ------------
    12/15/2013 21:30:01
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\System32\Drivers\sptd.sys
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\vmbus.sys
\SystemRoot\system32\drivers\winhv.sys
\SystemRoot\system32\DRIVERS\iaStor.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\Drivers\MfeEpeOpal.sys
\SystemRoot\system32\drivers\vmstorfl.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\Drivers\MfeEpePc.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\system32\DRIVERS\hpdskflt.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\dtsoftbus01.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\SRTSP64.SYS
\??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS
\SystemRoot\System32\Drivers\SRTSPX64.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vpcnfltr.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\vpcvmm.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\system32\DRIVERS\igdpmd64.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\SCSIPORT.SYS
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\HpqKbFiltr.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\drivers\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\SysWOW64\drivers\Afc.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\System32\Drivers\ahexpnfa.SYS
\SystemRoot\system32\DRIVERS\Accelerometer.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\mcvidrv_x64.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\drivers\mcaudrv_x64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\btath_bus.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\vpcusb.sys
\SystemRoot\system32\DRIVERS\usbrpm.sys
\SystemRoot\system32\DRIVERS\vpchbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\DRIVERS\stwrt64.sys
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\WinUSB.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\drivers\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\System32\Drivers\SPUVCbv_x64.sys
\SystemRoot\system32\DRIVERS\btfilter.sys
\SystemRoot\System32\Drivers\BTHUSB.sys
\SystemRoot\System32\Drivers\bthport.sys
\SystemRoot\system32\DRIVERS\rfcomm.sys
\SystemRoot\system32\DRIVERS\BthEnum.sys
\SystemRoot\system32\DRIVERS\bthpan.sys
\SystemRoot\system32\DRIVERS\btath_rcp.sys
\SystemRoot\system32\drivers\btath_avdt.sys
\SystemRoot\system32\drivers\btath_a2dp.sys
\SystemRoot\system32\DRIVERS\btath_hcrp.sys
\SystemRoot\system32\DRIVERS\btath_flt.sys
\SystemRoot\system32\DRIVERS\btath_lwflt.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_iaStor.sys
\SystemRoot\System32\Drivers\dump_MfeEpeHb.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\DRIVERS\vwifimp.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\drivers\npf.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
\SystemRoot\system32\DRIVERS\jmcr.sys
\??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20131214.005\EX64.SYS
\??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20131214.005\ENG64.SYS
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\DRIVERS\monitor.sys
\??\C:\windows\system32\drivers\mbamchameleon.sys
\??\C:\windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa800513d060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8004f00050
Lower Device Driver Name: \Driver\iaStor\
IRP handler 0 of \Driver\iaStor is hooked
IRP handler 2 of \Driver\iaStor is hooked
IRP handler 14 of \Driver\iaStor is hooked
IRP handler 15 of \Driver\iaStor is hooked
IRP handler 16 of \Driver\iaStor is hooked
IRP handler 22 of \Driver\iaStor is hooked
IRP handler 23 of \Driver\iaStor is hooked
IRP handler 27 of \Driver\iaStor is hooked
Unhooking enabled.
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa800513d060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8004f00050
Lower Device Driver Name: \Driver\iaStor\
Driver name found: iaStor
Initialization returned 0x0
Load Function returned 0x0
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa800513d060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa800513db90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa800501b900, DeviceName: Unknown, DriverName: \Driver\MfeEpeOpal\
DevicePointer: 0xfffffa800513e040, DeviceName: Unknown, DriverName: \Driver\MfeEpePc\
DevicePointer: 0xfffffa800513d060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa800501cb10, DeviceName: Unknown, DriverName: \Driver\hpdskflt\
DevicePointer: 0xfffffa8004edce40, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa8004f00050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
------------ End ----------
Alternate DeviceName: Unknown, DriverName: \Driver\MfeEpeOpal\
Upper DeviceData: 0xfffff8a007eb18d0, 0xfffffa800513d060, 0xfffffa800466b790
Lower DeviceData: 0xfffff8a005c29600, 0xfffffa8004f00050, 0xfffffa800844fe40
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: F2D83907

Partition information:

    Partition 0 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 63  Numsec = 1985

    Partition 1 type is Dynamic (0x42)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 614400
    Partition file system is NTFS
    Partition is bootable

    Partition 2 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 616448  Numsec = 1201825792

    Partition 3 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1202442240  Numsec = 47819440

Disk Size: 640135028736 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-1250243728-1250263728)...
Done!
Scan Interrupted
Scan Interrupted
Scan Interrupted
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

Java version: 1.6.0_35

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.294000 GHz
Memory total: 4226138112, free: 2527633408

Could not load protection driver
Downloaded database version: v2013.12.15.07
Downloaded database version: v2013.12.16.01
Downloaded database version: v2013.12.16.02
Downloaded database version: v2013.12.16.03
Downloaded database version: v2013.12.16.04
Downloaded database version: v2013.12.16.05
Downloaded database version: v2013.12.16.06
=======================================
Initializing...
------------ Kernel report ------------
    12/16/2013 16:44:19
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\System32\Drivers\sptd.sys
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\vmbus.sys
\SystemRoot\system32\drivers\winhv.sys
\SystemRoot\system32\DRIVERS\iaStor.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\Drivers\MfeEpeOpal.sys
\SystemRoot\system32\drivers\vmstorfl.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\Drivers\MfeEpePc.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\system32\DRIVERS\hpdskflt.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\dtsoftbus01.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\SRTSP64.SYS
\??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20131214.005\EX64.SYS
\??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS
\??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20131214.005\ENG64.SYS
\SystemRoot\System32\Drivers\SRTSPX64.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vpcnfltr.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\vpcvmm.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\system32\DRIVERS\igdpmd64.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\jmcr.sys
\SystemRoot\system32\DRIVERS\SCSIPORT.SYS
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\HpqKbFiltr.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\drivers\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\SysWOW64\drivers\Afc.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\System32\Drivers\ayxe5k01.SYS
\SystemRoot\system32\DRIVERS\Accelerometer.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\mcvidrv_x64.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\drivers\mcaudrv_x64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\btath_bus.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\vpcusb.sys
\SystemRoot\system32\DRIVERS\usbrpm.sys
\SystemRoot\system32\DRIVERS\vpchbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\DRIVERS\stwrt64.sys
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\WinUSB.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\drivers\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\btfilter.sys
\SystemRoot\System32\Drivers\BTHUSB.sys
\SystemRoot\System32\Drivers\bthport.sys
\SystemRoot\System32\Drivers\SPUVCbv_x64.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_iaStor.sys
\SystemRoot\System32\Drivers\dump_MfeEpeHb.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\rfcomm.sys
\SystemRoot\system32\DRIVERS\BthEnum.sys
\SystemRoot\system32\DRIVERS\bthpan.sys
\SystemRoot\system32\DRIVERS\btath_rcp.sys
\SystemRoot\system32\drivers\btath_avdt.sys
\SystemRoot\system32\drivers\btath_a2dp.sys
\SystemRoot\system32\DRIVERS\btath_hcrp.sys
\SystemRoot\system32\DRIVERS\btath_flt.sys
\SystemRoot\system32\DRIVERS\btath_lwflt.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\DRIVERS\vwifimp.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\drivers\npf.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
\SystemRoot\system32\drivers\spsys.sys
\??\C:\windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8005189060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8004f03050
Lower Device Driver Name: \Driver\iaStor\
IRP handler 0 of \Driver\iaStor is hooked
IRP handler 2 of \Driver\iaStor is hooked
IRP handler 14 of \Driver\iaStor is hooked
IRP handler 15 of \Driver\iaStor is hooked
IRP handler 16 of \Driver\iaStor is hooked
IRP handler 22 of \Driver\iaStor is hooked
IRP handler 23 of \Driver\iaStor is hooked
IRP handler 27 of \Driver\iaStor is hooked
Unhooking enabled.
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8005189060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8004f03050
Lower Device Driver Name: \Driver\iaStor\
Driver name found: iaStor
Initialization returned 0x0
Load Function returned 0x0
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8005189060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8005189b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8005027a10, DeviceName: Unknown, DriverName: \Driver\MfeEpeOpal\
DevicePointer: 0xfffffa800518a040, DeviceName: Unknown, DriverName: \Driver\MfeEpePc\
DevicePointer: 0xfffffa8005189060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8005028b10, DeviceName: Unknown, DriverName: \Driver\hpdskflt\
DevicePointer: 0xfffffa8004f13550, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa8004f03050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
------------ End ----------
Alternate DeviceName: Unknown, DriverName: \Driver\MfeEpeOpal\
Upper DeviceData: 0xfffff8a018b620f0, 0xfffffa8005189060, 0xfffffa800480e090
Lower DeviceData: 0xfffff8a0136ef710, 0xfffffa8004f03050, 0xfffffa80042fb990
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: F2D83907

Partition information:

    Partition 0 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 63  Numsec = 1985

    Partition 1 type is Dynamic (0x42)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 614400
    Partition file system is NTFS
    Partition is bootable

    Partition 2 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 616448  Numsec = 1201825792

    Partition 3 type is Dynamic (0x42)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1202442240  Numsec = 47819440

Disk Size: 640135028736 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-1250243728-1250263728)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_0_1_2048_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...
Removal finished

cosinus 16.12.2013 22:11
Leider das falsche Log :( bitte die Anleitung richtig lesen :)

Vrenice 17.12.2013 18:28
Ups, tut mir Leid :crazy:

Hier das richtige Log:
Code:
Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2013.12.16.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Philipp :: KONSTANZ [administrator]

16.12.2013 16:44:24
mbar-log-2013-12-16 (16-44-24).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
Objects scanned: 351735
Time elapsed: 1 hour(s), 39 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 17.12.2013 23:12
Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Vrenice 20.12.2013 17:41
So, da ich jetzt Urlaub habe, habe ich mich gleich mal an die Arbeit gemacht :rolleyes:

Hier die geforderten Logfiles:

AdwCleaner:
Code:
# AdwCleaner v3.015 - Bericht erstellt am 20/12/2013 um 17:06:42
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Philipp - KONSTANZ
# Gestartet von : C:\Users\Philipp\Downloads\adwcleaner(1).exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\windows\System32\Tasks\NCH Software
Ordner Gefunden C:\Program Files (x86)\myfree codec
Ordner Gefunden C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\APN PIP
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gefunden : HKCU\Software\Myfree Codec
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\APN PIP
Schlüssel Gefunden : [x64] HKCU\Software\Myfree Codec
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gefunden : HKLM\Software\Myfree Codec

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default\prefs.js ]

Zeile gefunden : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"226782\",\"name\":\"Philadelphia Eagles theme\",\"headerURL\":\"hxxps://addons.mozilla.org/_files/226782/fejlec.jpg?1283980921\",\"footerURL\":\"h[...]

-\\ Google Chrome v

[ Datei : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [15562 octets] - [16/11/2013 14:35:17]
AdwCleaner[R1].txt - [14856 octets] - [08/12/2013 17:41:50]
AdwCleaner[R2].txt - [2093 octets] - [20/12/2013 17:06:42]
AdwCleaner[S0].txt - [14148 octets] - [16/11/2013 15:19:02]
AdwCleaner[S1].txt - [12685 octets] - [08/12/2013 17:42:58]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [2275 octets] ##########
Code:
# AdwCleaner v3.015 - Bericht erstellt am 20/12/2013 um 17:12:19
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Philipp - KONSTANZ
# Gestartet von : C:\Users\Philipp\Downloads\adwcleaner(1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Datei Gelöscht : C:\windows\System32\Tasks\NCH Software

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default\prefs.js ]

Zeile gelöscht : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"226782\",\"name\":\"Philadelphia Eagles theme\",\"headerURL\":\"hxxps://addons.mozilla.org/_files/226782/fejlec.jpg?1283980921\",\"footerURL\":\"h[...]

-\\ Google Chrome v

[ Datei : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [15562 octets] - [16/11/2013 14:35:17]
AdwCleaner[R1].txt - [14856 octets] - [08/12/2013 17:41:50]
AdwCleaner[R2].txt - [2367 octets] - [20/12/2013 17:06:42]
AdwCleaner[S0].txt - [14148 octets] - [16/11/2013 15:19:02]
AdwCleaner[S1].txt - [12685 octets] - [08/12/2013 17:42:58]
AdwCleaner[S2].txt - [2141 octets] - [20/12/2013 17:12:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2201 octets] ##########
JRT:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x64
Ran by Philipp on 20.12.2013 at 17:25:24,88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Philipp\AppData\Roaming\mozilla\firefox\profiles\ujfa62rf.default\minidumps [8 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.12.2013 at 17:31:14,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by Philipp (administrator) on KONSTANZ on 20-12-2013 17:33:59
Running from C:\Users\Philipp\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Symantec Corporation) C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-04-29] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011824 2013-01-29] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-11-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Philipp\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-04] (Spotify Ltd)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-13] (Advanced Micro Devices, Inc.)
HKU\Gast\...\Run: [Facebook Update] - "C:\Users\Philipp\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\Gast\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\Gast\...\Run: [KiesHelper] - C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
HKU\Gast\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-03-20] (Samsung Electronics)
HKU\Gast\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd)
HKU\Gast\...\Run: [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe"  /MINIMIZED
HKU\Gast\...\RunOnce: [FlashPlayerUpdate] - C:\windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe -update activex
Lsa: [Notification Packages] DPPassFilter scecli
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/de/de/business/security_response/index.jsp
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.t-online.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/de/de/business/security_response/index.jsp
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {82A946F9-D715-42C0-A6D4-CF3FE9FD2BCB} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {9A17B9E1-E88D-4878-8BD0-8833CB6FE055} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL =
SearchScopes: HKCU - {FB1CE1E3-F1B6-4365-BE8D-16FEC5B3C90E} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {FD4253B9-9C7E-4445-AB92-C2E118AAEF9D} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
Toolbar: HKLM-x32 - No Name - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -  No File
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {BAD4FE2C-503B-45CC-88CD-4B0574057D11} hxxp://clients.futuremark.com/calico/systeminfodeploy/Futuremark_SystemInfo_4_19_133.cab
DPF: HKLM-x32 {E6F480FC-BD44-4CBA-B74A-89AF7842937D} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default
FF Homepage: hxxp://www.t-online.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ujfa62rf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "hxxp://www.t-online.de/"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Philipp\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Desktop) - C:\Users\Philipp\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Philipp\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (TV) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh\1.0.12_0
CHR Extension: (Brushed) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg\1.0_0
CHR Extension: (Snooker) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjohiacoelemalmancnccjggomjnkfod\1.0.2_0
CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Pool) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cedbddnnmhgnedpamoenmdkhnpnfbpjb\1.0.4_0
CHR Extension: (Adblock Plus) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (AdBlock) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 ccEvtMgr; C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [108392 2010-01-25] (Symantec Corporation)
R2 ccSetMgr; C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe [108392 2010-01-25] (Symantec Corporation)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [486224 2011-11-10] (DigitalPersona, Inc.)
S4 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [476728 2011-09-05] (Hewlett-Packard Company)
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [166112 2013-09-05] (Futuremark)
S3 LiveUpdate; C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_3.EXE [3093880 2010-02-17] (Symantec Corporation)
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1323008 2012-04-05] ()
R2 PnkBstrA; C:\windows\SysWow64\PnkBstrA.exe [76888 2013-11-25] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S4 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
R2 SmcService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe [3218880 2010-04-16] (Symantec Corporation)
S4 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE [419656 2010-04-01] (Symantec Corporation)
R2 Symantec AntiVirus; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe [1831024 2010-04-23] (Symantec Corporation)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-09-19] (TuneUp Software)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-09-14] (Qualcomm Atheros)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-08-20] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 FsUsbExDisk; C:\windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
S3 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [89304 2013-12-15] (Malwarebytes Corporation)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [100808 2012-04-05] (McAfee, Inc.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158920 2012-04-05] (McAfee, Inc.)
R3 NAVENG; C:\ProgramData\Symantec\Definitions\VirusDefs\20131219.004\eng64.sys [126040 2013-09-13] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Symantec\Definitions\VirusDefs\20131219.004\ex64.sys [2099288 2013-09-13] (Symantec Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2012-08-20] ()
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-12-31] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-08-20] (Duplex Secure Ltd.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2611704 2011-01-12] (Sunplus Technology)
R1 SRTSP; C:\Windows\System32\Drivers\SRTSP64.SYS [447536 2010-03-08] (Symantec Corporation)
R1 SRTSP; C:\Windows\SysWow64\Drivers\SRTSP64.SYS [447536 2010-03-08] (Symantec Corporation)
S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL64.SYS [482352 2010-03-08] (Symantec Corporation)
S3 SRTSPL; C:\Windows\SysWow64\Drivers\SRTSPL64.SYS [482352 2010-03-08] (Symantec Corporation)
R1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX64.SYS [32304 2010-03-08] (Symantec Corporation)
R1 SRTSPX; C:\Windows\SysWow64\Drivers\SRTSPX64.SYS [32304 2010-03-08] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [172592 2011-11-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software)
U3 asjbohnz; C:\Windows\System32\Drivers\asjbohnz.sys [0 ] (JMicron Technology Corporation)
S3 ALSysIO; \??\C:\Users\Philipp\AppData\Local\Temp\ALSysIO64.sys [x]
S3 ARCVCAM; system32\DRIVERS\ArcSoftVCapture.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-05] (Microsoft Corporation)
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
S3 xhunter1; \??\C:\windows\xhunter1.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-20 17:33 - 2013-12-20 17:34 - 00021217 _____ C:\Users\Philipp\Desktop\FRST.txt
2013-12-20 17:33 - 2013-12-20 17:33 - 00000000 ____D C:\Users\Philipp\Desktop\FRST-OlderVersion
2013-12-20 17:31 - 2013-12-20 17:31 - 00000760 _____ C:\Users\Philipp\Desktop\JRT.txt
2013-12-20 17:22 - 2013-12-20 17:22 - 01034531 _____ (Thisisu) C:\Users\Philipp\Downloads\JRT.exe
2013-12-20 17:05 - 2013-12-20 17:06 - 01226750 _____ C:\Users\Philipp\Downloads\adwcleaner(1).exe
2013-12-17 19:37 - 2013-12-17 19:37 - 00000000 ____D C:\Users\Philipp\Desktop\TJ
2013-12-17 18:38 - 2013-12-17 18:38 - 00000000 ____D C:\Users\Philipp\Documents\Square Enix
2013-12-16 20:05 - 2013-12-16 20:05 - 00000989 _____ C:\Users\Public\Desktop\ManyCam.lnk
2013-12-16 19:56 - 2013-12-16 19:57 - 15020504 _____ (Visicom Media Inc.) C:\Users\Philipp\Downloads\ManyCamSetup(1).exe
2013-12-16 16:35 - 2013-12-16 16:35 - 00000914 _____ C:\windows\PFRO.log
2013-12-15 21:30 - 2013-12-16 18:25 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-15 21:30 - 2013-12-16 16:44 - 00117464 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-15 21:27 - 2013-12-15 21:28 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-12-15 21:25 - 2013-12-15 21:26 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Philipp\Downloads\mbar-1.07.0.1008.exe
2013-12-15 20:29 - 2013-12-20 17:33 - 00000000 ____D C:\FRST
2013-12-15 20:27 - 2013-12-20 17:33 - 02193141 _____ (Farbar) C:\Users\Philipp\Desktop\FRST64.exe
2013-12-15 20:23 - 2013-12-20 17:15 - 00000710 _____ C:\windows\setupact.log
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setuperr.log
2013-12-15 18:50 - 2013-12-15 18:51 - 33893112 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe
2013-12-14 11:48 - 2013-12-14 12:24 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-14 11:48 - 2013-12-14 11:48 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-12-14 11:46 - 2013-12-14 11:46 - 00614784 _____ C:\Users\Philipp\Downloads\SpeedFan - CHIP-Downloader.exe
2013-12-13 23:35 - 2013-12-13 23:35 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Need for Speed World
2013-12-13 22:52 - 2013-12-13 22:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Electronic_Arts_Inc
2013-12-13 22:46 - 2013-12-13 22:48 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-11 17:04 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-11 17:04 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-11 17:04 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-11 17:04 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-11 16:56 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-11 16:56 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-11 16:56 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-11 16:56 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-11 16:56 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-11 16:56 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-11 16:56 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-11 16:56 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-11 16:56 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-11 16:56 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-11 16:56 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-11 16:56 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-11 16:56 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-11 16:56 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-11 16:56 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-11 16:56 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-11 16:56 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-11 16:56 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-11 16:55 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-11 16:55 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-11 16:55 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-11 16:55 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-11 16:55 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-11 16:55 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-11 16:55 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-11 16:55 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-11 16:55 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-11 16:55 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-11 16:55 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-11 16:55 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-11 16:55 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-11 16:46 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-11 16:46 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-11 16:46 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-11 16:46 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-11 16:46 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-11 16:46 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-11 16:46 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-11 16:46 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-11 16:46 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-11 16:46 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-11 16:46 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-11 16:46 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-11 16:46 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-11 16:46 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-11 16:46 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-11 16:46 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-11 16:46 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-11 16:46 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-11 16:46 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-08 19:27 - 2013-12-16 19:27 - 00003198 _____ C:\windows\System32\Tasks\HPCeeScheduleForPhilipp
2013-12-08 19:27 - 2013-12-16 19:27 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForPhilipp.job
2013-12-08 17:58 - 2013-12-08 17:58 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_enu.exe
2013-12-08 17:51 - 2013-12-08 17:51 - 00000000 ____D C:\windows\ERUNT
2013-12-08 17:40 - 2013-12-08 17:40 - 01110034 _____ C:\Users\Philipp\Downloads\adwcleaner.exe
2013-12-08 17:30 - 2013-12-08 17:30 - 00033644 _____ C:\ComboFix.txt
2013-12-08 16:51 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2013-12-08 16:51 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2013-12-08 16:51 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2013-12-08 16:51 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2013-12-08 16:49 - 2013-12-08 17:30 - 00000000 ____D C:\Qoobox
2013-12-08 16:48 - 2013-12-08 17:29 - 00000000 ____D C:\windows\erdnt
2013-12-08 16:47 - 2013-12-08 16:47 - 05153293 ____R (Swearware) C:\Users\Philipp\Downloads\ComboFix.exe
2013-12-07 22:36 - 2013-12-07 22:36 - 00614784 _____ C:\Users\Philipp\Downloads\Slender The Eight Pages - CHIP-Downloader.exe
2013-12-06 14:37 - 2013-12-06 14:37 - 00035232 _____ (Visicom Media Inc.) C:\windows\system32\Drivers\mcaudrv_x64.sys
2013-12-03 20:22 - 2013-12-03 20:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\mystart_ad
2013-12-02 20:35 - 2013-12-02 20:36 - 00000000 ____D C:\Users\Philipp\AppData\Local\PAYDAY
2013-12-02 20:29 - 2013-12-02 20:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-28 19:11 - 2013-11-28 19:11 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(2).exe
2013-11-28 19:08 - 2013-11-28 19:08 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(1).exe
2013-11-28 19:05 - 2013-11-28 19:06 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-11-27 02:54 - 2013-11-27 02:54 - 00042016 _____ (Visicom Media Inc.) C:\windows\system32\Drivers\mcvidrv.sys
2013-11-25 18:45 - 2013-12-15 18:54 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-25 18:42 - 2013-11-25 18:43 - 29709992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeMP4VideoConverter.exe
2013-11-25 17:40 - 2013-11-25 17:40 - 00001282 _____ C:\Users\Philipp\Desktop\Origin.lnk
2013-11-25 17:26 - 2013-11-25 17:26 - 03820448 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_129.exe
2013-11-25 17:20 - 2013-11-25 17:20 - 00000000 ____D C:\ProgramData\EA Core
2013-11-25 02:34 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2013-11-25 02:34 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_7.dll
2013-11-25 02:34 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_43.dll
2013-11-25 02:33 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_6.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_4.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_4.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_7.dll
2013-11-25 02:32 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_7.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_5.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_5.dll
2013-11-25 02:32 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_5.dll
2013-11-25 02:31 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_3.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_42.dll
2013-11-25 02:31 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_42.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_3.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_2.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_2.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_5.dll
2013-11-25 02:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_5.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_2.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_2.dll
2013-11-25 02:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_1.dll
2013-11-25 02:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_2.dll
2013-11-24 17:05 - 2013-11-25 17:20 - 00000000 ____D C:\Users\Philipp\AppData\Local\Origin
2013-11-24 17:03 - 2013-12-14 15:06 - 00000000 ____D C:\Program Files (x86)\Origin
2013-11-24 17:02 - 2013-11-24 17:02 - 16959688 _____ (Electronic Arts, Inc.) C:\Users\Philipp\Downloads\OriginThinSetup_9.2.1.4399.exe
2013-11-20 19:44 - 2013-11-20 19:44 - 00000000 ____D C:\ProgramData\EmailNotifier
2013-11-20 19:41 - 2013-11-20 19:42 - 15246704 _____ (ManyCam LLC) C:\Users\Philipp\Downloads\ManyCamSetup.exe

==================== One Month Modified Files and Folders =======

2013-12-20 17:34 - 2013-12-20 17:33 - 00021217 _____ C:\Users\Philipp\Desktop\FRST.txt
2013-12-20 17:33 - 2013-12-20 17:33 - 00000000 ____D C:\Users\Philipp\Desktop\FRST-OlderVersion
2013-12-20 17:33 - 2013-12-15 20:29 - 00000000 ____D C:\FRST
2013-12-20 17:33 - 2013-12-15 20:27 - 02193141 _____ (Farbar) C:\Users\Philipp\Desktop\FRST64.exe
2013-12-20 17:31 - 2013-12-20 17:31 - 00000760 _____ C:\Users\Philipp\Desktop\JRT.txt
2013-12-20 17:29 - 2009-07-14 05:45 - 00020720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-20 17:29 - 2009-07-14 05:45 - 00020720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-20 17:28 - 2013-05-28 12:22 - 00000000 ____D C:\Users\Philipp\Desktop\Ordner
2013-12-20 17:22 - 2013-12-20 17:22 - 01034531 _____ (Thisisu) C:\Users\Philipp\Downloads\JRT.exe
2013-12-20 17:16 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-20 17:15 - 2013-12-15 20:23 - 00000710 _____ C:\windows\setupact.log
2013-12-20 17:13 - 2011-08-15 22:46 - 01354941 _____ C:\windows\WindowsUpdate.log
2013-12-20 17:12 - 2013-11-16 14:35 - 00000000 ____D C:\AdwCleaner
2013-12-20 17:06 - 2013-12-20 17:05 - 01226750 _____ C:\Users\Philipp\Downloads\adwcleaner(1).exe
2013-12-20 16:37 - 2012-11-17 18:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-20 16:06 - 2013-05-04 19:27 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-20 15:24 - 2012-08-21 18:47 - 00282296 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-12-20 15:24 - 2012-08-21 18:47 - 00282296 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-12-20 15:22 - 2012-08-21 18:47 - 00215128 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-12-20 15:04 - 2013-08-27 17:15 - 00000000 ____D C:\Users\Philipp\AppData\Local\ManyCam
2013-12-20 14:10 - 2012-12-28 18:38 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify
2013-12-20 13:34 - 2012-11-17 18:58 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-20 13:34 - 2012-09-20 16:49 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-20 13:34 - 2011-11-18 10:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-20 13:30 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-19 21:23 - 2012-01-13 21:25 - 00003938 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{9E8426AC-DAA3-4B7B-9619-BD432B7F36E0}
2013-12-19 19:52 - 2011-12-26 11:54 - 00000000 ____D C:\Users\Philipp\AppData\Local\CrashDumps
2013-12-19 18:02 - 2012-12-28 18:38 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify
2013-12-18 19:58 - 2011-12-25 20:13 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Skype
2013-12-17 19:58 - 2012-12-23 19:36 - 00000000 ____D C:\Users\Philipp\Documents\VirtualDJ
2013-12-17 19:37 - 2013-12-17 19:37 - 00000000 ____D C:\Users\Philipp\Desktop\TJ
2013-12-17 18:38 - 2013-12-17 18:38 - 00000000 ____D C:\Users\Philipp\Documents\Square Enix
2013-12-16 20:05 - 2013-12-16 20:05 - 00000989 _____ C:\Users\Public\Desktop\ManyCam.lnk
2013-12-16 20:05 - 2013-08-27 17:14 - 00000000 ____D C:\Program Files (x86)\ManyCam
2013-12-16 19:57 - 2013-12-16 19:56 - 15020504 _____ (Visicom Media Inc.) C:\Users\Philipp\Downloads\ManyCamSetup(1).exe
2013-12-16 19:27 - 2013-12-08 19:27 - 00003198 _____ C:\windows\System32\Tasks\HPCeeScheduleForPhilipp
2013-12-16 19:27 - 2013-12-08 19:27 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForPhilipp.job
2013-12-16 18:25 - 2013-12-15 21:30 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-16 16:44 - 2013-12-15 21:30 - 00117464 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-16 16:35 - 2013-12-16 16:35 - 00000914 _____ C:\windows\PFRO.log
2013-12-15 21:28 - 2013-12-15 21:27 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-12-15 21:26 - 2013-12-15 21:25 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Philipp\Downloads\mbar-1.07.0.1008.exe
2013-12-15 21:20 - 2013-10-25 18:50 - 00000000 ____D C:\Users\Philipp\Documents\Bandicam
2013-12-15 20:23 - 2013-12-15 20:23 - 00000000 _____ C:\windows\setuperr.log
2013-12-15 19:33 - 2011-12-31 12:20 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log
2013-12-15 19:32 - 2013-01-20 13:29 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-12-15 18:54 - 2013-11-25 18:45 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-12-15 18:54 - 2012-05-25 21:59 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\DVDVideoSoft
2013-12-15 18:51 - 2013-12-15 18:50 - 33893112 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe
2013-12-14 16:45 - 2011-11-08 19:26 - 00000000 ____D C:\windows\rescache
2013-12-14 15:06 - 2013-11-24 17:03 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-14 12:24 - 2013-12-14 11:48 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-14 11:48 - 2013-12-14 11:48 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-12-14 11:46 - 2013-12-14 11:46 - 00614784 _____ C:\Users\Philipp\Downloads\SpeedFan - CHIP-Downloader.exe
2013-12-13 23:35 - 2013-12-13 23:35 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Need for Speed World
2013-12-13 22:52 - 2013-12-13 22:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Electronic_Arts_Inc
2013-12-13 22:51 - 2013-04-28 19:06 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-12-13 22:48 - 2013-12-13 22:46 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-13 21:17 - 2013-02-12 20:00 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-12-12 18:02 - 2013-11-16 22:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-11 20:24 - 2013-04-28 19:17 - 00000000 ____D C:\ProgramData\Origin
2013-12-11 20:24 - 2011-12-26 14:25 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-11 19:17 - 2012-11-01 15:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-11 17:34 - 2011-05-03 19:08 - 00716194 _____ C:\windows\system32\perfh007.dat
2013-12-11 17:34 - 2011-05-03 19:08 - 00156752 _____ C:\windows\system32\perfc007.dat
2013-12-11 17:34 - 2009-07-14 06:13 - 01660510 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-11 17:27 - 2013-01-09 22:05 - 00423912 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-11 17:03 - 2011-11-18 08:59 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 16:53 - 2013-07-19 16:24 - 00000000 ____D C:\windows\system32\MRT
2013-12-11 16:49 - 2011-11-18 09:17 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-09 19:12 - 2011-11-08 10:32 - 00000000 ____D C:\Users\Philipp
2013-12-09 19:10 - 2009-07-14 03:34 - 95805440 _____ C:\windows\system32\config\SOFTWARE_tureg_old
2013-12-09 19:10 - 2009-07-14 03:34 - 22020096 _____ C:\windows\system32\config\SYSTEM_tureg_old
2013-12-09 19:10 - 2009-07-14 03:34 - 00028672 _____ C:\windows\system32\config\SECURITY_tureg_old
2013-12-09 19:05 - 2009-07-14 03:34 - 00483328 _____ C:\windows\system32\config\DEFAULT_tureg_old
2013-12-09 19:05 - 2009-07-14 03:34 - 00106496 _____ C:\windows\system32\config\SAM_tureg_old
2013-12-08 17:58 - 2013-12-08 17:58 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_enu.exe
2013-12-08 17:51 - 2013-12-08 17:51 - 00000000 ____D C:\windows\ERUNT
2013-12-08 17:43 - 2013-01-10 21:43 - 00001116 _____ C:\Users\Philipp\Desktop\Internet Explorer (2).lnk
2013-12-08 17:43 - 2012-12-26 23:03 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-12-08 17:43 - 2012-09-02 17:33 - 00000000 ____D C:\windows\System32\Tasks\NCH Software
2013-12-08 17:43 - 2012-02-14 14:06 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4
2013-12-08 17:43 - 2011-11-08 11:40 - 00001146 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 17:43 - 2011-11-08 11:40 - 00000000 ___RD C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 17:40 - 2013-12-08 17:40 - 01110034 _____ C:\Users\Philipp\Downloads\adwcleaner.exe
2013-12-08 17:30 - 2013-12-08 17:30 - 00033644 _____ C:\ComboFix.txt
2013-12-08 17:30 - 2013-12-08 16:49 - 00000000 ____D C:\Qoobox
2013-12-08 17:30 - 2013-07-28 13:08 - 00000000 ____D C:\Users\TEMP.Konstanz
2013-12-08 17:29 - 2013-12-08 16:48 - 00000000 ____D C:\windows\erdnt
2013-12-08 17:25 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2013-12-08 17:07 - 2009-07-14 03:34 - 96993280 _____ C:\windows\system32\config\software.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 22020096 _____ C:\windows\system32\config\system.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00524288 _____ C:\windows\system32\config\default.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00106496 _____ C:\windows\system32\config\sam.bak
2013-12-08 17:07 - 2009-07-14 03:34 - 00028672 _____ C:\windows\system32\config\security.bak
2013-12-08 16:47 - 2013-12-08 16:47 - 05153293 ____R (Swearware) C:\Users\Philipp\Downloads\ComboFix.exe
2013-12-07 22:36 - 2013-12-07 22:36 - 00614784 _____ C:\Users\Philipp\Downloads\Slender The Eight Pages - CHIP-Downloader.exe
2013-12-06 14:37 - 2013-12-06 14:37 - 00035232 _____ (Visicom Media Inc.) C:\windows\system32\Drivers\mcaudrv_x64.sys
2013-12-03 20:22 - 2013-12-03 20:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\mystart_ad
2013-12-03 17:57 - 2011-05-03 18:49 - 01638534 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-02 20:36 - 2013-12-02 20:35 - 00000000 ____D C:\Users\Philipp\AppData\Local\PAYDAY
2013-12-02 20:29 - 2013-12-02 20:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-01 20:25 - 2012-03-15 20:03 - 00000000 ____D C:\windows\Minidump
2013-12-01 14:22 - 2013-05-16 14:42 - 00003696 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-28 19:11 - 2013-11-28 19:11 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(2).exe
2013-11-28 19:08 - 2013-11-28 19:08 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130(1).exe
2013-11-28 19:06 - 2013-11-28 19:05 - 03821064 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-11-27 02:54 - 2013-11-27 02:54 - 00042016 _____ (Visicom Media Inc.) C:\windows\system32\Drivers\mcvidrv.sys
2013-11-26 21:47 - 2011-11-08 10:31 - 00003218 _____ C:\windows\System32\Tasks\HPCeeScheduleForKONSTANZ$
2013-11-26 21:47 - 2011-11-08 10:31 - 00000342 _____ C:\windows\Tasks\HPCeeScheduleForKONSTANZ$.job
2013-11-26 12:54 - 2013-12-11 16:56 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-11 16:56 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-11 16:56 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-11 16:55 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-11 16:56 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-11 16:56 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-11 16:55 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-11 16:56 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-11 16:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-11 16:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-11 16:56 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-11 16:56 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-11 16:56 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-11 16:56 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-11 16:56 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-11 16:56 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-11-26 09:38 - 2013-12-11 16:55 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-11-26 09:35 - 2013-12-11 16:55 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-11 16:56 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-11 16:56 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 16:55 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-11 16:55 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-11 16:55 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-11 16:55 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 16:55 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-11 16:55 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-11 16:55 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-11 16:56 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-11 16:56 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 16:55 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-11 16:55 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-11-25 18:43 - 2013-11-25 18:42 - 29709992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Philipp\Downloads\FreeMP4VideoConverter.exe
2013-11-25 18:39 - 2012-12-12 19:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-25 18:39 - 2011-08-15 23:11 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 17:47 - 2012-08-21 18:47 - 00076888 _____ C:\windows\SysWOW64\PnkBstrA.exe
2013-11-25 17:40 - 2013-11-25 17:40 - 00001282 _____ C:\Users\Philipp\Desktop\Origin.lnk
2013-11-25 17:27 - 2012-08-20 19:06 - 00000000 ____D C:\Users\Philipp\AppData\Local\PunkBuster
2013-11-25 17:26 - 2013-11-25 17:26 - 03820448 _____ C:\Users\Philipp\Downloads\battlelog-web-plugins_2.3.2_129.exe
2013-11-25 17:20 - 2013-11-25 17:20 - 00000000 ____D C:\ProgramData\EA Core
2013-11-25 17:20 - 2013-11-24 17:05 - 00000000 ____D C:\Users\Philipp\AppData\Local\Origin
2013-11-24 17:06 - 2013-04-28 19:17 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Origin
2013-11-24 17:02 - 2013-11-24 17:02 - 16959688 _____ (Electronic Arts, Inc.) C:\Users\Philipp\Downloads\OriginThinSetup_9.2.1.4399.exe
2013-11-23 19:26 - 2013-12-11 16:46 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-11 16:46 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-11-21 17:48 - 2013-10-27 23:28 - 00000000 ____D C:\Users\Philipp\AppData\Local\PMB Files
2013-11-21 17:48 - 2013-10-27 23:28 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-20 19:44 - 2013-11-20 19:44 - 00000000 ____D C:\ProgramData\EmailNotifier
2013-11-20 19:43 - 2011-11-08 11:42 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Mozilla
2013-11-20 19:42 - 2013-11-20 19:41 - 15246704 _____ (ManyCam LLC) C:\Users\Philipp\Downloads\ManyCamSetup.exe
2013-11-20 19:28 - 2011-12-24 22:35 - 00000000 ____D C:\Users\Philipp\AppData\Local\Adobe

Some content of TEMP:
====================
C:\Users\Philipp\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-18 15:51

==================== End Of Log ============================
--- --- ---


Viele Grüße,
Philipp

cosinus 20.12.2013 23:58
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Alle Zeitangaben in WEZ +1. Es ist jetzt 10:18 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19