Trojaner-Board - Ereignisprotokoll Au_.exe und vieles vieles mehr

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Ereignisprotokoll Au_.exe und vieles vieles mehr (https://www.trojaner-board.de/149274-ereignisprotokoll-au_-exe-vieles-vieles-mehr.html)

Ereignisprotokoll Au_.exe und vieles vieles mehr

Hallo,

ich habe mehrere "Baustellen" zum Einen wollte heute auf meinen PC "Daemon Tools Lite" deinstallieren, doch jedesmal beim deinstallieren kommt die Fehlermeldung "Daemon Tools" funktioniert nicht mehr. (auch bei mehrmaligen Neustart des PC`s

Daraufhin habe ich mal in die Ereignisprotokollen geschaut hier ein Auszug:

"Name der fehlerhaften Anwendung: Au_.exe, Version: 4.48.1.347, Zeitstempel: 0x4bc06cda
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0xc20
Startzeit der fehlerhaften Anwendung: 0x01cf22207eb40ac1
Pfad der fehlerhaften Anwendung: C:\Users\XXX\AppData\Local\Temp\~nsu.tmp\Au_.exe
Pfad des fehlerhaften Moduls: C:\Windows\syswow64\KERNELBASE.dll
Berichtskennung: be2bff36-8e13-11e3-9504-406186298329"

Die nächste "Baustelle" laut Ereignisprotokoll ist:

"Der Dienst "WCMVCAM" wurde aufgrund folgenden Fehlers nicht gestartet:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden."

Dann noch dieser hier:

"Benutzerdefinierte DLLs werden für jede Anwendung geladen. Der Systemadministrator sollte die Liste der DLLs prüfen, um sicherzustellen, dass sie sich auf die vertrauenswürdigen Anwendungen beziehen."

Hier:

"Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest."

Ich hoffe das ist nicht soviel aufeinmal :confused: Ich war selber etwas überrascht.:wtf:

Und danke aufjedenfall schonmal im Voraus:daumenhoc

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014

Ran by XXX (administrator) on XXX-PC on 05-02-2014 04:32:24

Running from C:\Users\XXX\Desktop

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Ellora Assets Corp.) G:\Tools\Freemake\CaptureLib\CaptureLibService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Razer Inc.) G:\Tools\Razer Game Booster\RzKLService.exe

(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe

() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Valve Corporation) E:\Spiele\Steam\Steam.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [OODefragTray] - C:\Program Files\OO Software\Defrag\oodtray.exe [4464936 2013-12-16] (O&O Software GmbH)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248832 2012-01-14] ()

AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => File Not Found
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x07C3E9EA0EEACE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCtBzyzztAtBzytA0FtA0FtN0D0Tzu0SyBtDtCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=610215439&ir=

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCtBzyzztAtBzytA0FtA0FtN0D0Tzu0SyBtDtCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=610215439&ir=

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: No Name - {3706EE7C-3CAD-445D-8A43-03EBC3B75908} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default

FF Homepage: hxxp://www.google.de/

FF Keyword.URL: user_pref("keyword.URL", "");

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\searchplugins\search_engine.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: ProxTube - Unblock YouTube - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\ich@maltegoetz.de [2013-12-11]

FF Extension: LavaFox V2 - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\info@djzig.com [2014-01-13]

FF Extension: exfm - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\jid0-IsXX48jx4obwoZPnzG6RQB0pK9A@jetpack [2013-11-25]

FF Extension: NetVideoHunter - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\netvideohunter@netvideohunter.com [2013-12-19]

FF Extension: WOT - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]

FF Extension: HP Detect - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-12-02]

FF Extension: DownloadHelper - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-12-19]

FF Extension: 1ClickMovie Downloader - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\clickMvd@clickMvd.com.xpi [2013-11-25]

FF Extension: SaveFrom.net helper - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\helper@savefrom.net.xpi [2013-12-19]

FF Extension: Magic Actions for YouTube™ - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2013-11-25]

FF Extension: NASA Night Launch - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\nasanightlaunch@example.com.xpi [2013-11-25]

FF Extension: Noia Fox options - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi [2014-01-17]

FF Extension: Toggle Persona - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\togglepersona@davidvincent.tld.xpi [2013-11-25]

FF Extension: Stylish - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2013-11-25]

FF Extension: Youtube Downloader - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{599B9024-EBA6-4258-95C5-9133F8D73856}.xpi [2013-11-25]

FF Extension: Noia Fox - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi [2013-11-25]

FF Extension: Soundcloud SUPER +2: Downloader and Recommender - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{988da70d-b78d-44a1-a9c7-ed11832a9e2e}.xpi [2013-11-25]

FF Extension: Downloads Window - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{a7213cf2-fa1e-4373-88ff-255d0abd3020}.xpi [2013-12-29]

FF Extension: Shine Bright Skin Aero - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi [2013-11-25]

FF Extension: Show my Password - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2013-12-29]

FF Extension: Adblock Plus - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-25]

FF Extension: Greasemonkey - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-11-25]
 

Chrome: 

=======

CHR DefaultSearchProvider: Conduit Search

CHR DefaultSearchURL: hxxp://www.google.com

CHR DefaultNewTabURL: 

CHR Extension: (Google Docs) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-05]

CHR Extension: (Google Drive) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-05]

CHR Extension: (YouTube) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-05]

CHR Extension: (Hide My Ass! Web Proxy) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd [2014-01-05]

CHR Extension: (Google Search) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-05]

CHR Extension: (FastestFox for Chrome) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-12-24]

CHR Extension: (Google Wallet) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-05]

CHR Extension: (Google Wallet) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-05]
 

==================== Services (Whitelisted) =================
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4161512 2013-12-04] (Emsisoft GmbH)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-06] ()

R2 FreemakeVideoCapture; G:\Tools\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-12-12] (Ellora Assets Corp.)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1656616 2013-12-16] (O&O Software GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-05] ()

R2 RzKLService; G:\Tools\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
 

==================== Drivers (Whitelisted) ====================
 

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [70960 2013-08-24] (Emsisoft GmbH)

R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)

S3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)

R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)

R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

S3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-01] (Duplex Secure Ltd.)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-11-25] (Spotflux, Inc.)

S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [113936 2013-12-18] (Oracle Corporation)

S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-05 04:32 - 2014-02-05 04:32 - 00017700 _____ () C:\Users\Horst\Desktop\FRST.txt

2014-02-05 04:31 - 2014-02-05 04:31 - 02080256 _____ (Farbar) C:\Users\Horst\Desktop\FRST64.exe

2014-02-05 04:28 - 2014-02-05 04:28 - 00000160 _____ () C:\Users\Horst\defogger_reenable

2014-02-05 04:01 - 2014-02-05 04:29 - 00002030 _____ () C:\Windows\PFRO.log

2014-02-05 04:00 - 2014-02-05 04:00 - 00002497 _____ () C:\Users\Public\Desktop\O&O Defrag.lnk

2014-02-05 04:00 - 2014-02-05 04:00 - 00000000 ____D () C:\Program Files\OO Software

2014-02-05 03:44 - 2014-02-05 03:44 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk

2014-02-05 03:44 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-02-05 03:44 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-02-05 03:43 - 2014-02-05 03:43 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA

2014-02-05 03:42 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-02-05 03:42 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-05 03:41 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-05 03:41 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-05 03:41 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-02-05 03:41 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-02-05 03:41 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-02-05 03:41 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-02-05 03:41 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-02-05 03:41 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-02-05 03:39 - 2014-02-05 03:39 - 00000000 ____D () C:\NVIDIA

2014-02-05 03:39 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-02-05 03:39 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-02-05 03:39 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-02-05 03:39 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-02-05 03:39 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-02-05 03:39 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-02-05 03:39 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin

2014-02-05 03:38 - 2014-02-05 04:29 - 00001355 _____ () C:\Windows\setupact.log

2014-02-05 03:38 - 2014-02-05 03:38 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-05 03:32 - 2014-02-05 04:10 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige

2014-02-05 03:31 - 2014-02-05 04:32 - 00066507 _____ () C:\Windows\WindowsUpdate.log

2014-02-05 03:23 - 2014-02-05 03:23 - 00003544 ____N () C:\bootsqm.dat

2014-02-05 02:42 - 2014-02-05 02:42 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-05 02:42 - 2014-02-05 02:42 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-05 02:21 - 2014-02-05 02:21 - 00000751 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2014-02-04 21:58 - 2014-02-04 21:58 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\www.shadowexplorer.com

2014-02-03 16:25 - 2014-02-03 16:48 - 00000000 ____D () C:\Users\Horst\AppData\Local\Battle.net

2014-02-03 16:25 - 2014-02-03 16:25 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Battle.net

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-02-03 16:21 - 2014-02-03 16:21 - 00000000 ____D () C:\ProgramData\Battle.net

2014-02-03 01:47 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-02-03 01:44 - 2014-02-03 01:45 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-01 18:16 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\Horst\AppData\Local\EdgeOfReality

2014-02-01 17:48 - 2014-02-01 17:51 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Awesomium

2014-01-29 20:34 - 2014-01-29 20:34 - 00000209 _____ () C:\Users\Horst\Desktop\Rust.url

2014-01-28 23:20 - 2014-01-28 23:25 - 00000000 ____D () C:\Users\Horst\Desktop\Active-File-Recovery-Professional-12.0.3

2014-01-28 20:26 - 2014-01-28 23:23 - 00000000 ____D () C:\Program Files\LSoft Technologies

2014-01-26 23:56 - 2014-01-26 23:56 - 00000000 ____D () C:\Users\Horst\AppData\Local\O&O

2014-01-26 23:55 - 2014-01-26 23:57 - 00000000 ____D () C:\Windows\system32\oodag

2014-01-26 23:55 - 2014-01-26 23:55 - 00000000 ____D () C:\ProgramData\OO Software

2014-01-26 19:20 - 2014-02-05 03:23 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-01-26 19:20 - 2014-02-05 02:42 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-01-26 19:06 - 2014-02-05 03:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job

2014-01-26 19:06 - 2014-02-05 02:00 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job

2014-01-26 19:06 - 2014-01-26 19:06 - 00003588 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1

2014-01-26 19:06 - 2014-01-26 19:06 - 00003514 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f

2014-01-26 19:06 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SUPERAntiSpyware.com

2014-01-26 19:05 - 2014-01-26 23:49 - 00001965 _____ () C:\Users\Horst\Desktop\SUPERAntiSpyware Professional.lnk

2014-01-26 19:05 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:06 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:05 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com

2014-01-25 01:57 - 2014-01-25 02:04 - 00000000 ____D () C:\Users\Horst\AppData\Local\ManyCam

2014-01-25 01:57 - 2014-01-25 01:57 - 00001019 _____ () C:\Users\Public\Desktop\ManyCam.lnk

2014-01-25 01:47 - 2014-01-08 04:36 - 01037068 _____ (Thisisu) C:\Users\Horst\Desktop\JRT_NEW.exe

2014-01-25 01:38 - 2014-01-25 01:38 - 00000000 _____ () C:\autoexec.bat

2014-01-25 01:37 - 2014-01-25 01:41 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-01-25 01:37 - 2014-01-25 01:37 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-01-25 01:19 - 2014-01-25 02:04 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\ManyCam

2014-01-25 01:19 - 2014-01-25 01:57 - 00000000 ____D () C:\Program Files (x86)\ManyCam

2014-01-25 01:07 - 2014-01-25 01:08 - 00000000 ____D () C:\ProgramData\webcam 7

2014-01-25 01:02 - 2013-04-24 09:45 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00080896 _____ () C:\Windows\SysWOW64\ff_vfw.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00000590 _____ () C:\Windows\SysWOW64\ff_vfw.dll.manifest

2014-01-25 00:54 - 2014-02-03 15:37 - 00000000 ____D () C:\Program Files (x86)\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000939 _____ () C:\Users\Horst\Desktop\Open Broadcaster Software.lnk

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files\OBS

2014-01-25 00:50 - 2014-01-25 00:50 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\WebcamMax

2014-01-25 00:39 - 2014-01-25 00:39 - 00000000 ____D () C:\Program Files (x86)\IPCameraDSFilter

2014-01-24 21:56 - 2014-01-24 23:57 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-01-18 02:09 - 2014-02-05 03:31 - 00000000 ____D () C:\Windows\Minidump

2014-01-17 20:51 - 2014-01-17 20:51 - 00000000 ____D () C:\ProgramData\McAfee

2014-01-16 16:21 - 2014-01-16 16:21 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\PDF Architect

2014-01-15 10:34 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 10:34 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-12 18:37 - 2014-01-12 18:37 - 00355840 _____ () C:\Windows\SysWOW64\LiveWrapRTSP.dll

2014-01-08 02:03 - 2014-01-08 02:03 - 00000000 ____D () C:\Users\Horst\VirtualBox VMs

2014-01-08 02:02 - 2014-01-08 05:47 - 00000000 ____D () C:\Users\Horst\.VirtualBox

2014-01-08 02:01 - 2013-12-18 17:19 - 00252688 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys

2014-01-08 02:00 - 2013-12-18 17:16 - 00126736 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys

2014-01-08 00:53 - 2014-01-25 01:41 - 00000000 ____D () C:\Windows\system32\appmgmt

2014-01-07 14:54 - 2014-01-07 14:54 - 00000000 ____D () C:\Users\Horst\AppData\Local\IsolatedStorage

2014-01-07 14:52 - 2014-01-07 15:17 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-01-07 14:51 - 2014-01-25 01:11 - 00000000 ____D () C:\ProgramData\Apple

2014-01-07 14:51 - 2014-01-07 14:51 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple
 

==================== One Month Modified Files and Folders =======
 

2014-02-05 04:32 - 2014-02-05 04:32 - 00017700 _____ () C:\Users\Horst\Desktop\FRST.txt

2014-02-05 04:32 - 2014-02-05 03:31 - 00066507 _____ () C:\Windows\WindowsUpdate.log

2014-02-05 04:32 - 2013-12-29 12:09 - 00000000 ____D () C:\FRST

2014-02-05 04:32 - 2013-12-05 22:21 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-05 04:32 - 2013-11-26 03:05 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-05 04:31 - 2014-02-05 04:31 - 02080256 _____ (Farbar) C:\Users\Horst\Desktop\FRST64.exe

2014-02-05 04:29 - 2014-02-05 04:01 - 00002030 _____ () C:\Windows\PFRO.log

2014-02-05 04:29 - 2014-02-05 03:38 - 00001355 _____ () C:\Windows\setupact.log

2014-02-05 04:29 - 2013-12-15 04:50 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-05 04:29 - 2013-12-05 22:21 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-05 04:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-05 04:28 - 2014-02-05 04:28 - 00000160 _____ () C:\Users\Horst\defogger_reenable

2014-02-05 04:28 - 2013-12-19 23:08 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware

2014-02-05 04:28 - 2013-11-25 19:40 - 00000000 ____D () C:\Users\Horst

2014-02-05 04:12 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-05 04:12 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-05 04:10 - 2014-02-05 03:32 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige

2014-02-05 04:10 - 2013-11-26 01:11 - 00007630 _____ () C:\Users\Horst\AppData\Local\Resmon.ResmonCfg

2014-02-05 04:10 - 2009-07-14 18:58 - 00699376 _____ () C:\Windows\system32\perfh007.dat

2014-02-05 04:10 - 2009-07-14 18:58 - 00149552 _____ () C:\Windows\system32\perfc007.dat

2014-02-05 04:10 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-05 04:00 - 2014-02-05 04:00 - 00002497 _____ () C:\Users\Public\Desktop\O&O Defrag.lnk

2014-02-05 04:00 - 2014-02-05 04:00 - 00000000 ____D () C:\Program Files\OO Software

2014-02-05 03:55 - 2013-12-05 06:01 - 00000000 ____D () C:\Program Files (x86)\Gomez

2014-02-05 03:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-02-05 03:44 - 2014-02-05 03:44 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk

2014-02-05 03:44 - 2013-11-25 20:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-02-05 03:44 - 2013-11-25 20:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-02-05 03:44 - 2013-11-25 20:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-05 03:43 - 2014-02-05 03:43 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA

2014-02-05 03:39 - 2014-02-05 03:39 - 00000000 ____D () C:\NVIDIA

2014-02-05 03:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help

2014-02-05 03:38 - 2014-02-05 03:38 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-05 03:31 - 2014-01-18 02:09 - 00000000 ____D () C:\Windows\Minidump

2014-02-05 03:31 - 2013-12-01 19:12 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\DAEMON Tools Lite

2014-02-05 03:29 - 2013-12-31 23:56 - 00000000 ____D () C:\AdwCleaner

2014-02-05 03:23 - 2014-02-05 03:23 - 00003544 ____N () C:\bootsqm.dat

2014-02-05 03:23 - 2014-01-26 19:20 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-05 03:06 - 2014-01-26 19:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job

2014-02-05 03:01 - 2013-12-04 21:40 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA Corporation

2014-02-05 03:00 - 2013-11-30 18:53 - 00000000 ____D () C:\Program Files (x86)\Thread Manager

2014-02-05 02:42 - 2014-02-05 02:42 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-05 02:42 - 2014-02-05 02:42 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-05 02:42 - 2014-01-26 19:20 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-05 02:22 - 2013-12-05 05:40 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\vlc

2014-02-05 02:21 - 2014-02-05 02:21 - 00000751 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2014-02-05 02:00 - 2014-01-26 19:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job

2014-02-04 21:58 - 2014-02-04 21:58 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\www.shadowexplorer.com

2014-02-04 21:51 - 2013-11-26 19:40 - 00000000 ____D () C:\Users\Horst\AppData\Local\PMB Files

2014-02-04 20:53 - 2013-11-26 19:40 - 00000000 ____D () C:\ProgramData\PMB Files

2014-02-03 20:14 - 2013-12-16 21:50 - 00000000 ____D () C:\Users\Horst\AppData\Local\DayZ

2014-02-03 16:48 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Battle.net

2014-02-03 16:25 - 2014-02-03 16:25 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Battle.net

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-02-03 16:21 - 2014-02-03 16:21 - 00000000 ____D () C:\ProgramData\Battle.net

2014-02-03 15:37 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files (x86)\OBS

2014-02-03 01:45 - 2014-02-03 01:44 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-03 01:45 - 2013-11-29 21:08 - 00000000 ____D () C:\ProgramData\Oracle

2014-02-03 01:45 - 2013-11-29 21:07 - 00000000 ____D () C:\Program Files (x86)\Java

2014-02-01 18:16 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\Horst\AppData\Local\EdgeOfReality

2014-02-01 17:51 - 2014-02-01 17:48 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Awesomium

2014-01-31 21:01 - 2013-12-18 23:52 - 00010520 _____ () C:\Users\Horst\Desktop\Neues Textdokument.txt

2014-01-29 20:34 - 2014-01-29 20:34 - 00000209 _____ () C:\Users\Horst\Desktop\Rust.url

2014-01-29 20:00 - 2013-12-01 19:27 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-28 23:25 - 2014-01-28 23:20 - 00000000 ____D () C:\Users\Horst\Desktop\Active-File-Recovery-Professional-12.0.3

2014-01-28 23:23 - 2014-01-28 20:26 - 00000000 ____D () C:\Program Files\LSoft Technologies

2014-01-28 23:01 - 2013-11-30 10:47 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apps\2.0

2014-01-28 20:20 - 2013-12-01 19:47 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\TeamViewer

2014-01-26 23:57 - 2014-01-26 23:55 - 00000000 ____D () C:\Windows\system32\oodag

2014-01-26 23:56 - 2014-01-26 23:56 - 00000000 ____D () C:\Users\Horst\AppData\Local\O&O

2014-01-26 23:55 - 2014-01-26 23:55 - 00000000 ____D () C:\ProgramData\OO Software

2014-01-26 23:49 - 2014-01-26 19:05 - 00001965 _____ () C:\Users\Horst\Desktop\SUPERAntiSpyware Professional.lnk

2014-01-26 19:06 - 2014-01-26 19:06 - 00003588 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1

2014-01-26 19:06 - 2014-01-26 19:06 - 00003514 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f

2014-01-26 19:06 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SUPERAntiSpyware.com

2014-01-26 19:06 - 2014-01-26 19:05 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-01-26 19:06 - 2014-01-26 19:05 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:05 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com

2014-01-25 02:04 - 2014-01-25 01:57 - 00000000 ____D () C:\Users\Horst\AppData\Local\ManyCam

2014-01-25 02:04 - 2014-01-25 01:19 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\ManyCam

2014-01-25 01:57 - 2014-01-25 01:57 - 00001019 _____ () C:\Users\Public\Desktop\ManyCam.lnk

2014-01-25 01:57 - 2014-01-25 01:19 - 00000000 ____D () C:\Program Files (x86)\ManyCam

2014-01-25 01:53 - 2014-01-02 13:35 - 00987425 _____ () C:\Users\Horst\Desktop\SecurityCheck.exe

2014-01-25 01:52 - 2013-11-26 03:16 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Notepad++

2014-01-25 01:41 - 2014-01-25 01:37 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-01-25 01:41 - 2014-01-08 00:53 - 00000000 ____D () C:\Windows\system32\appmgmt

2014-01-25 01:38 - 2014-01-25 01:38 - 00000000 _____ () C:\autoexec.bat

2014-01-25 01:37 - 2014-01-25 01:37 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-01-25 01:11 - 2014-01-07 14:51 - 00000000 ____D () C:\ProgramData\Apple

2014-01-25 01:08 - 2014-01-25 01:07 - 00000000 ____D () C:\ProgramData\webcam 7

2014-01-25 00:54 - 2014-01-25 00:54 - 00000939 _____ () C:\Users\Horst\Desktop\Open Broadcaster Software.lnk

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files\OBS

2014-01-25 00:50 - 2014-01-25 00:50 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\WebcamMax

2014-01-25 00:39 - 2014-01-25 00:39 - 00000000 ____D () C:\Program Files (x86)\IPCameraDSFilter

2014-01-24 23:57 - 2014-01-24 21:56 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-01-22 20:41 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini

2014-01-19 08:33 - 2013-11-25 19:59 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-01-17 20:51 - 2014-01-17 20:51 - 00000000 ____D () C:\ProgramData\McAfee

2014-01-17 20:51 - 2013-11-26 03:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-17 20:51 - 2013-11-26 03:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-17 20:51 - 2013-11-26 03:05 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-17 20:51 - 2013-11-26 00:46 - 00000000 ____D () C:\Users\Horst\AppData\Local\Adobe

2014-01-16 16:21 - 2014-01-16 16:21 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\PDF Architect

2014-01-15 18:26 - 2009-07-14 05:45 - 00422032 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 14:55 - 2013-11-25 20:08 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 14:54 - 2013-11-25 20:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-12 18:37 - 2014-01-12 18:37 - 00355840 _____ () C:\Windows\SysWOW64\LiveWrapRTSP.dll

2014-01-09 23:58 - 2013-11-26 00:54 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-01-08 05:47 - 2014-01-08 02:02 - 00000000 ____D () C:\Users\Horst\.VirtualBox

2014-01-08 05:27 - 2013-12-14 03:04 - 00000665 _____ () C:\Users\Horst\Desktop\FurMark.lnk

2014-01-08 04:36 - 2014-01-25 01:47 - 01037068 _____ (Thisisu) C:\Users\Horst\Desktop\JRT_NEW.exe

2014-01-08 02:03 - 2014-01-08 02:03 - 00000000 ____D () C:\Users\Horst\VirtualBox VMs

2014-01-07 15:17 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Apple Computer

2014-01-07 14:54 - 2014-01-07 14:54 - 00000000 ____D () C:\Users\Horst\AppData\Local\IsolatedStorage

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-01-07 14:51 - 2014-01-07 14:51 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-29 02:33
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014

Ran by XXXX at 2014-02-05 04:32:46

Running from C:\Users\XXX\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
 

==================== Installed Programs ======================
 

Active@ File Recovery Professional 12 (Version: 12 - LSoft Technologies Inc)

Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)

Auslogics DiskDefrag (x32 Version: 4.3.1.0 - Auslogics Labs Pty Ltd)

Battle.net (x32 Version:  - Blizzard Entertainment)

Battlefield 4™ (x32 Version: 1.0.0.1 - Electronic Arts)

Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB)

CCleaner (Version: 4.08 - Piriform)

ControlCenter (x32 Version: 1.0.230 - MSI)

Counter-Strike: Global Offensive (x32 Version:  - Valve)

DAEMON Tools Lite (x32 Version: 4.48.1.0347 - Disc Soft Ltd)

DayZ (x32 Version:  - Bohemia Interactive)

Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version:  - Microsoft)

Emsisoft Anti-Malware (x32 Version: 8.1 - Emsisoft GmbH)

ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)

Freemake Video Downloader (x32 Version: 3.6.2 - Ellora Assets Corporation)

Geeks3D FurMark 1.12.0 (x32 Version:  - Geeks3D)

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

HP IDF Software (x32 Version: 11.15.1000 - Hewlett-Packard Company)

Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)

JMicron JMB36X Driver (x32 Version: 1.00.0000 - JMicron Technology Corp.)

League of Legends (x32 Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Left 4 Dead 2 (x32 Version:  - Valve)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)

ManyCam 4.0.44 (x32 Version: 4.0.44 - Visicom Media Inc.)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden

Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)

Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (x32 Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (x32 Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)

Notepad++ (x32 Version: 6.5.2 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden

NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)

O&O Defrag Professional (Version: 17.0.490 - O&O Software GmbH)

Open Broadcaster Software (x32 Version:  - )

Origin (x32 Version: 9.2.1.4399 - Electronic Arts, Inc.)

Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)

PDFCreator (x32 Version: 1.7.2 - pdfforge)

PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)

Razer DeathAdder(TM) Mouse (x32 Version: 3.05 - Razer USA Ltd.)

Razer Game Booster (x32 Version: 4.0.68.0 - Razer Inc.)

Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013 - Realtek)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6959 - Realtek Semiconductor Corp.)

Rust (x32 Version:  - Facepunch Studios)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden

Steam (x32 Version: 1.0.0.0 - Valve Corporation)

SUPERAntiSpyware (Version: 5.7.1018 - SUPERAntiSpyware.com)

TeamSpeak 3 Client (HKCU Version: 3.0.13 - TeamSpeak Systems GmbH)

TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)

Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (Version:  - Microsoft)

VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN)

WinZip 16.0 (Version: 16.0.9715 - WinZip Computing, S.L. )
 

==================== Restore Points  =========================
 

05-02-2014 02:44:08 DirectX wurde installiert

05-02-2014 03:00:19 O&O Defrag Professional wird installiert
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-12-30 12:32 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {16CB78DE-6DA7-4479-A289-2739139171D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)

Task: {23E74F71-CC0C-44F1-9676-A8C6B525F39D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-17] (Adobe Systems Incorporated)

Task: {590011D2-72BF-4E09-9B36-5472889BC2AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)

Task: {5E52BF8D-CA4F-40A4-B776-2594381DA973} - System32\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {6E6A0025-0633-47BA-9F4C-1A450E2E4A89} - System32\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {79763122-348E-4D88-9092-41213C76335B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll

2013-12-20 15:11 - 2013-12-20 15:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-01-09 12:57 - 2013-12-12 23:19 - 00142848 _____ () E:\Spiele\Steam\libavresample-1.dll

2014-01-09 12:57 - 2013-11-05 02:12 - 00890592 _____ () E:\Spiele\Steam\libavutil-52.dll

2013-10-24 09:45 - 2014-01-11 00:33 - 00717312 _____ () E:\Spiele\Steam\SDL2.dll

2013-10-30 11:25 - 2014-01-27 20:02 - 01138088 _____ () E:\Spiele\Steam\bin\chromehtml.DLL

2013-10-23 12:07 - 2014-01-11 00:33 - 20625832 _____ () E:\Spiele\Steam\bin\libcef.dll

2013-06-14 15:49 - 2013-06-15 00:49 - 01100800 _____ () E:\Spiele\Steam\bin\avcodec-53.dll

2013-06-14 15:49 - 2013-06-15 00:49 - 00124416 _____ () E:\Spiele\Steam\bin\avutil-51.dll

2013-06-14 15:49 - 2013-06-15 00:49 - 00192000 _____ () E:\Spiele\Steam\bin\avformat-53.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\Temp:07BB519E

AlternateDataStreams: C:\ProgramData\Temp:9E00596C

AlternateDataStreams: C:\ProgramData\Temp:E744A7DC
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/05/2014 04:15:20 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Au_.exe, Version: 4.48.1.347, Zeitstempel: 0x4bc06cda

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0xc20

Startzeit der fehlerhaften Anwendung: 0xAu_.exe0

Pfad der fehlerhaften Anwendung: Au_.exe1

Pfad des fehlerhaften Moduls: Au_.exe2

Berichtskennung: Au_.exe3
 

Error: (02/05/2014 04:14:55 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Au_.exe, Version: 4.48.1.347, Zeitstempel: 0x4bc06cda

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x33c

Startzeit der fehlerhaften Anwendung: 0xAu_.exe0

Pfad der fehlerhaften Anwendung: Au_.exe1

Pfad des fehlerhaften Moduls: Au_.exe2

Berichtskennung: Au_.exe3
 

Error: (02/05/2014 04:05:49 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: DTLite.exe, Version: 4.48.1.347, Zeitstempel: 0x526e206a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0xb8c

Startzeit der fehlerhaften Anwendung: 0xDTLite.exe0

Pfad der fehlerhaften Anwendung: DTLite.exe1

Pfad des fehlerhaften Moduls: DTLite.exe2

Berichtskennung: DTLite.exe3
 

Error: (02/05/2014 04:01:46 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: DTLite.exe, Version: 4.48.1.347, Zeitstempel: 0x526e206a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0xad4

Startzeit der fehlerhaften Anwendung: 0xDTLite.exe0

Pfad der fehlerhaften Anwendung: DTLite.exe1

Pfad des fehlerhaften Moduls: DTLite.exe2

Berichtskennung: DTLite.exe3
 

Error: (02/05/2014 04:00:38 AM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance(CLSID_VSSCoordinator)" ist ein unerwarteter Fehler aufgetreten. hr = 0x800401f0, CoInitialize wurde nicht aufgerufen.

.
 

Error: (02/05/2014 04:00:38 AM) (Source: VSS) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} und dem Namen "Coordinator" kann nicht gestartet werden. [0x800401f0, CoInitialize wurde nicht aufgerufen.

]
 

Error: (02/05/2014 04:00:35 AM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance(CLSID_VSSCoordinator)" ist ein unerwarteter Fehler aufgetreten. hr = 0x800401f0, CoInitialize wurde nicht aufgerufen.

.
 

Error: (02/05/2014 04:00:35 AM) (Source: VSS) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} und dem Namen "Coordinator" kann nicht gestartet werden. [0x800401f0, CoInitialize wurde nicht aufgerufen.

]
 

Error: (02/05/2014 03:59:03 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Au_.exe, Version: 4.48.1.347, Zeitstempel: 0x4bc06cda

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x11e4

Startzeit der fehlerhaften Anwendung: 0xAu_.exe0

Pfad der fehlerhaften Anwendung: Au_.exe1

Pfad des fehlerhaften Moduls: Au_.exe2

Berichtskennung: Au_.exe3
 

Error: (02/05/2014 03:57:58 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (02/05/2014 04:29:29 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WCMVCAM" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 04:05:46 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WCMVCAM" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 04:01:40 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WCMVCAM" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 03:45:22 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 03:42:05 AM) (Source: volsnap) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (02/05/2014 03:39:04 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 03:30:49 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 03:23:48 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1058
 

Error: (02/05/2014 03:01:47 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NvNetworkService erreicht.
 

Error: (02/04/2014 01:48:45 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 
 

Microsoft Office Sessions:

=========================

Error: (02/05/2014 04:15:20 AM) (Source: Application Error)(User: )

Description: Au_.exe4.48.1.3474bc06cdaKERNELBASE.dll6.1.7601.1822951fb1116c06d007e0000c41fc2001cf22207eb40ac1C:\Users\Horst\AppData\Local\Temp\~nsu.tmp\Au_.exeC:\Windows\syswow64\KERNELBASE.dllbe2bff36-8e13-11e3-9504-406186298329
 

Error: (02/05/2014 04:14:55 AM) (Source: Application Error)(User: )

Description: Au_.exe4.48.1.3474bc06cdaKERNELBASE.dll6.1.7601.1822951fb1116c06d007e0000c41f33c01cf22206eb483c8C:\Users\Horst\AppData\Local\Temp\~nsu.tmp\Au_.exeC:\Windows\syswow64\KERNELBASE.dllaf3bd51d-8e13-11e3-9504-406186298329
 

Error: (02/05/2014 04:05:49 AM) (Source: Application Error)(User: )

Description: DTLite.exe4.48.1.347526e206aKERNELBASE.dll6.1.7601.1822951fb1116c06d007e0000c41fb8c01cf221f29e75b43G:\Tools\DAEMON Tools Lite\DTLite.exeC:\Windows\syswow64\KERNELBASE.dll69dd3afb-8e12-11e3-9504-406186298329
 

Error: (02/05/2014 04:01:46 AM) (Source: Application Error)(User: )

Description: DTLite.exe4.48.1.347526e206aKERNELBASE.dll6.1.7601.1822951fb1116c06d007e0000c41fad401cf221e970415bcG:\Tools\DAEMON Tools Lite\DTLite.exeC:\Windows\syswow64\KERNELBASE.dlld8fbe081-8e11-11e3-957f-406186298329
 

Error: (02/05/2014 04:00:38 AM) (Source: VSS)(User: )

Description: CoCreateInstance(CLSID_VSSCoordinator)0x800401f0, CoInitialize wurde nicht aufgerufen.
 

Error: (02/05/2014 04:00:38 AM) (Source: VSS)(User: )

Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}Coordinator0x800401f0, CoInitialize wurde nicht aufgerufen.
 

Error: (02/05/2014 04:00:35 AM) (Source: VSS)(User: )

Description: CoCreateInstance(CLSID_VSSCoordinator)0x800401f0, CoInitialize wurde nicht aufgerufen.
 

Error: (02/05/2014 04:00:35 AM) (Source: VSS)(User: )

Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}Coordinator0x800401f0, CoInitialize wurde nicht aufgerufen.
 

Error: (02/05/2014 03:59:03 AM) (Source: Application Error)(User: )

Description: Au_.exe4.48.1.3474bc06cdaKERNELBASE.dll6.1.7601.1822951fb1116c06d007e0000c41f11e401cf221e36a309a4C:\Users\Horst\AppData\Local\Temp\~nsu.tmp\Au_.exeC:\Windows\syswow64\KERNELBASE.dll77caa729-8e11-11e3-8728-406186298329
 

Error: (02/05/2014 03:57:58 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestG:\Downloads\esetsmartinstaller_enu.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-12-30 12:31:00.942

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume5\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-12-30 12:31:00.873

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume5\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 33%

Total physical RAM: 8183.11 MB

Available physical RAM: 5473.75 MB

Total Pagefile: 16364.41 MB

Available Pagefile: 13540.41 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:59.53 GB) (Free:17.36 GB) NTFS

Drive e: () (Fixed) (Total:533.48 GB) (Free:470.5 GB) NTFS

Drive f: () (Fixed) (Total:298.03 GB) (Free:297.93 GB) NTFS

Drive g: () (Fixed) (Total:100 GB) (Free:97.34 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0EF270DC)

Partition 1: (Not Active) - (Size=100 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=533 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: B4F32661)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.05.01
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Horst :: HORST-PC [Administrator]
 

05.02.2014 05:16:49

mbam-log-2014-02-05 (05-16-49).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 211628

Laufzeit: 2 Minute(n), 13 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Code:

ComboFix 14-02-05.02 - Horst 05.02.2014  11:12:45.2.4 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1031.18.8183.6141 [GMT 1:00]

Running from: c:\users\Horst\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}

SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\202621273b5f292b_c

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((((   Files Created from 2014-01-05 to 2014-02-05  )))))))))))))))))))))))))))))))

.

.

2014-02-05 10:15 . 2014-02-05 10:15        --------        d-----w-        c:\users\Public\AppData\Local\temp

2014-02-05 10:15 . 2014-02-05 10:15        --------        d-----w-        c:\users\Default\AppData\Local\temp

2014-02-05 05:34 . 2014-02-05 05:34        --------        d-----w-        c:\users\Horst\AppData\Local\Blizzard

2014-02-05 05:08 . 2014-01-15 22:35        599840        ----a-w-        c:\windows\SysWow64\nvStreaming.exe

2014-02-05 05:07 . 2014-01-15 21:53        6712608        ----a-w-        c:\windows\system32\nvcpl.dll

2014-02-05 05:07 . 2014-01-15 21:53        3498272        ----a-w-        c:\windows\system32\nvsvc64.dll

2014-02-05 05:07 . 2014-01-15 21:53        923936        ----a-w-        c:\windows\system32\nvvsvc.exe

2014-02-05 05:07 . 2014-01-15 21:53        63776        ----a-w-        c:\windows\system32\nvshext.dll

2014-02-05 05:07 . 2014-01-15 21:53        386336        ----a-w-        c:\windows\system32\nvmctray.dll

2014-02-05 05:07 . 2014-01-15 21:53        2559776        ----a-w-        c:\windows\system32\nvsvcr.dll

2014-02-05 05:07 . 2014-01-13 22:31        3559557        ----a-w-        c:\windows\system32\nvcoproc.bin

2014-02-05 05:07 . 2014-01-15 23:13        61216        ----a-w-        c:\windows\system32\OpenCL.dll

2014-02-05 05:07 . 2014-01-15 23:13        53024        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2014-02-05 04:38 . 2014-02-05 04:39        --------        d-----w-        c:\program files\HitmanPro

2014-02-05 04:38 . 2014-02-05 04:40        --------        d-----w-        c:\programdata\HitmanPro

2014-02-05 03:57 . 2013-12-03 18:28        10315576        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F56972E2-FD05-4824-9D77-2477133F0CB0}\mpengine.dll

2014-02-05 03:00 . 2014-02-05 03:00        --------        d-----w-        c:\program files\OO Software

2014-02-05 02:44 . 2013-12-10 02:15        982232        ----a-w-        c:\windows\SysWow64\nvspcap.dll

2014-02-05 02:44 . 2013-12-10 02:14        1100248        ----a-w-        c:\windows\system32\nvspcap64.dll

2014-02-05 02:43 . 2014-02-05 04:54        --------        d-----w-        c:\users\Horst\AppData\Local\NVIDIA

2014-02-05 02:41 . 2013-12-05 08:42        39200        ----a-w-        c:\windows\system32\drivers\nvvad64v.sys

2014-02-05 02:41 . 2013-12-05 08:42        35104        ----a-w-        c:\windows\system32\nvaudcap64v.dll

2014-02-05 02:41 . 2013-12-05 08:42        32544        ----a-w-        c:\windows\SysWow64\nvaudcap32v.dll

2014-02-05 02:39 . 2014-02-05 02:39        --------        d-----w-        C:\NVIDIA

2014-02-04 20:58 . 2014-02-04 20:58        --------        d-----w-        c:\users\Horst\AppData\Roaming\www.shadowexplorer.com

2014-02-04 11:57 . 2013-12-03 18:28        10315576        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2014-02-03 15:25 . 2014-02-03 15:25        --------        d-----w-        c:\users\Horst\AppData\Local\Blizzard Entertainment

2014-02-03 15:25 . 2014-02-05 10:10        --------        d-----w-        c:\users\Horst\AppData\Local\Battle.net

2014-02-03 15:25 . 2014-02-05 05:30        --------        d-----w-        c:\users\Horst\AppData\Roaming\Battle.net

2014-02-03 15:25 . 2014-02-05 05:31        --------        d-----w-        c:\program files (x86)\Common Files\Blizzard Entertainment

2014-02-03 15:25 . 2014-02-03 15:25        --------        d-----w-        c:\program files (x86)\Battle.net

2014-02-03 15:25 . 2014-02-03 15:25        --------        d-----w-        c:\programdata\Blizzard Entertainment

2014-02-03 15:21 . 2014-02-03 15:21        --------        d-----w-        c:\programdata\Battle.net

2014-02-03 00:47 . 2013-11-26 11:40        376768        ----a-w-        c:\windows\system32\drivers\netio.sys

2014-02-01 17:16 . 2014-02-01 17:16        --------        d-----w-        c:\users\Horst\AppData\Local\EdgeOfReality

2014-02-01 16:48 . 2014-02-01 16:51        --------        d-----w-        c:\users\Horst\AppData\Roaming\Awesomium

2014-01-28 19:26 . 2014-01-28 22:23        --------        d-----w-        c:\program files\LSoft Technologies

2014-01-26 22:56 . 2014-01-26 22:56        --------        d-----w-        c:\users\Horst\AppData\Local\O&O

2014-01-26 22:55 . 2014-01-26 22:57        --------        d-----w-        c:\windows\system32\oodag

2014-01-26 22:55 . 2014-01-26 22:55        --------        d-----w-        c:\programdata\OO Software

2014-01-26 18:20 . 2014-02-05 01:42        --------        d-----w-        c:\programdata\Spybot - Search & Destroy

2014-01-26 18:20 . 2014-02-05 02:23        --------        d-----w-        c:\program files (x86)\Spybot - Search & Destroy 2

2014-01-26 18:06 . 2014-01-26 18:06        --------        d-----w-        c:\users\Horst\AppData\Roaming\SUPERAntiSpyware.com

2014-01-26 18:05 . 2014-01-26 18:06        --------        d-----w-        c:\program files\SUPERAntiSpyware

2014-01-26 18:05 . 2014-01-26 18:05        --------        d-----w-        c:\programdata\SUPERAntiSpyware.com

2014-01-25 00:57 . 2014-01-25 01:04        --------        d-----w-        c:\users\Horst\AppData\Local\ManyCam

2014-01-25 00:37 . 2014-01-25 00:37        --------        d-----w-        c:\program files\Enigma Software Group

2014-01-25 00:37 . 2014-01-25 00:41        --------        d-----w-        c:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-01-25 00:37 . 2014-01-25 00:37        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard

2014-01-25 00:23 . 2013-12-20 15:21        965000        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2014-01-25 00:23 . 2013-12-20 15:21        965000        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9492548F-E2C9-47B0-A797-2719741C2271}\gapaengine.dll

2014-01-25 00:19 . 2014-01-25 01:04        --------        d-----w-        c:\users\Horst\AppData\Roaming\ManyCam

2014-01-25 00:19 . 2014-01-25 00:57        --------        d-----w-        c:\program files (x86)\ManyCam

2014-01-25 00:07 . 2014-01-25 00:08        --------        d-----w-        c:\programdata\webcam 7

2014-01-25 00:02 . 2013-04-24 08:45        810496        ----a-w-        c:\windows\SysWow64\xvidcore.dll

2014-01-25 00:02 . 2013-04-24 08:45        80896        ----a-w-        c:\windows\SysWow64\ff_vfw.dll

2014-01-25 00:02 . 2013-04-24 08:45        183808        ----a-w-        c:\windows\SysWow64\xvidvfw.dll

2014-01-24 23:54 . 2014-01-24 23:54        --------        d-----w-        c:\users\Horst\AppData\Roaming\OBS

2014-01-24 23:54 . 2014-01-24 23:54        --------        d-----w-        c:\program files\OBS

2014-01-24 23:54 . 2014-02-03 14:37        --------        d-----w-        c:\program files (x86)\OBS

2014-01-24 23:50 . 2014-01-24 23:50        --------        d-----w-        c:\users\Horst\AppData\Roaming\WebcamMax

2014-01-24 23:39 . 2014-01-24 23:39        --------        d-----w-        c:\program files (x86)\IPCameraDSFilter

2014-01-24 20:56 . 2014-01-24 22:57        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-01-17 19:51 . 2014-01-17 19:51        --------        d-----w-        c:\programdata\McAfee

2014-01-16 15:22 . 2014-01-16 15:22        --------        d-----w-        c:\program files (x86)\Common Files\PDF Architect

2014-01-16 15:21 . 2014-01-16 15:21        --------        d-----w-        c:\users\Horst\AppData\Roaming\PDF Architect

2014-01-15 09:34 . 2013-11-27 01:41        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys

2014-01-15 09:34 . 2013-11-27 01:41        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys

2014-01-15 09:34 . 2013-11-27 01:41        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys

2014-01-15 09:34 . 2013-11-27 01:41        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys

2014-01-15 09:34 . 2013-11-27 01:41        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys

2014-01-15 09:34 . 2013-11-27 01:41        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys

2014-01-15 09:34 . 2013-11-27 01:41        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys

2014-01-15 09:34 . 2013-11-26 10:32        3156480        ----a-w-        c:\windows\system32\win32k.sys

2014-01-12 17:37 . 2014-01-12 17:37        355840        ----a-w-        c:\windows\SysWow64\LiveWrapRTSP.dll

2014-01-08 01:03 . 2014-01-08 01:03        --------        d-----w-        c:\users\Horst\VirtualBox VMs

2014-01-08 01:02 . 2014-01-08 04:47        --------        d-----w-        c:\users\Horst\.VirtualBox

2014-01-08 01:01 . 2013-12-18 16:19        252688        ----a-w-        c:\windows\system32\drivers\VBoxDrv.sys

2014-01-08 01:00 . 2013-12-18 16:16        126736        ----a-w-        c:\windows\system32\drivers\VBoxUSBMon.sys

2014-01-07 23:53 . 2014-01-25 00:41        --------        d-----w-        c:\windows\system32\appmgmt

2014-01-07 13:54 . 2014-01-07 13:54        --------        d-----w-        c:\users\Horst\AppData\Local\IsolatedStorage

2014-01-07 13:52 . 2014-01-07 14:17        --------        d-----w-        c:\users\Horst\AppData\Roaming\Apple Computer

2014-01-07 13:52 . 2014-01-07 13:52        --------        d-----w-        c:\users\Horst\AppData\Local\Apple Computer

2014-01-07 13:52 . 2014-01-24 22:57        --------        dc----w-        c:\windows\system32\DRVSTORE

2014-01-07 13:52 . 2014-01-07 13:52        --------        d-----w-        c:\programdata\Apple Computer

2014-01-07 13:51 . 2014-01-07 13:51        --------        d-----w-        c:\users\Horst\AppData\Local\Apple

2014-01-07 13:51 . 2014-01-25 00:11        --------        d-----w-        c:\programdata\Apple

2014-01-06 10:36 . 2014-01-06 10:36        --------        d-----w-        c:\program files (x86)\Common Files\BattlEye

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-01-19 07:33 . 2013-11-25 18:59        270496        ------w-        c:\windows\system32\MpSigStub.exe

2014-01-17 19:51 . 2013-11-26 02:05        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-01-17 19:51 . 2013-11-26 02:05        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2014-01-15 13:54 . 2013-11-25 19:08        86054176        ----a-w-        c:\windows\system32\MRT.exe

2014-01-09 22:58 . 2013-11-25 23:54        214392        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe

2013-12-18 20:09 . 2013-11-29 20:07        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-12-18 16:16 . 2013-12-18 16:16        140560        ----a-w-        c:\windows\system32\drivers\VBoxNetAdp.sys

2013-12-18 16:16 . 2013-12-18 16:16        113936        ----a-w-        c:\windows\system32\drivers\VBoxUSB.sys

2013-12-18 16:13 . 2013-12-18 16:13        204048        ------w-        c:\windows\system32\VBoxNetFltNobj.dll

2013-12-16 19:35 . 2013-11-25 23:54        214392        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0

2013-12-16 16:39 . 2013-12-16 16:39        240936        ----a-w-        c:\windows\system32\oodbs.exe

2013-12-16 16:39 . 2013-12-16 16:39        11048        ----a-w-        c:\windows\system32\oodbsrs.dll

2013-12-06 13:37 . 2013-12-06 13:37        35232        ----a-w-        c:\windows\system32\drivers\mcaudrv_x64.sys

2013-12-05 18:14 . 2013-11-25 23:54        76888        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe

2013-12-05 00:26 . 2013-12-05 00:26        140096        ------r-        c:\windows\SysWow64\COMDLG32.OCX

2013-12-04 03:28 . 2013-12-20 15:13        10315576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{D71F2AB6-5C29-4EFF-A42C-1B6A770FCAAD}\mpengine.dll

2013-12-01 18:13 . 2013-12-01 18:13        381440        ----a-w-        c:\windows\system32\drivers\sptd.sys

2013-11-29 19:57 . 2013-10-28 09:44        884952        ----a-w-        c:\windows\system32\drivers\Rt64win7.sys

2013-11-29 19:57 . 2013-10-28 09:44        74456        ----a-w-        c:\windows\system32\RtNicProp64.dll

2013-11-29 19:57 . 2013-10-28 09:44        108760        ----a-w-        c:\windows\system32\RTNUninst64.dll

2013-11-29 00:54 . 2013-11-28 22:53        291296        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr

2013-11-27 01:54 . 2013-11-27 01:54        42016        ----a-w-        c:\windows\system32\drivers\mcvidrv.sys

2013-11-26 11:54 . 2013-12-16 20:18        23183360        ----a-w-        c:\windows\system32\mshtml.dll

2013-11-26 10:19 . 2013-12-16 20:18        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

2013-11-26 10:18 . 2013-12-16 20:18        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll

2013-11-26 09:48 . 2013-12-16 20:18        66048        ----a-w-        c:\windows\system32\iesetup.dll

2013-11-26 09:46 . 2013-12-16 20:18        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll

2013-11-26 09:41 . 2013-12-16 20:18        2764288        ----a-w-        c:\windows\system32\iertutil.dll

2013-11-26 09:29 . 2013-12-16 20:18        53760        ----a-w-        c:\windows\system32\jsproxy.dll

2013-11-26 09:27 . 2013-12-16 20:18        33792        ----a-w-        c:\windows\system32\iernonce.dll

2013-11-26 09:23 . 2013-12-16 20:18        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2013-11-26 09:21 . 2013-12-16 20:18        574976        ----a-w-        c:\windows\system32\ieui.dll

2013-11-26 09:18 . 2013-12-16 20:18        139264        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-11-26 09:18 . 2013-12-16 20:18        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe

2013-11-26 09:16 . 2013-12-16 20:18        708608        ----a-w-        c:\windows\system32\jscript9diag.dll

2013-11-26 08:57 . 2013-12-16 20:18        218624        ----a-w-        c:\windows\system32\ie4uinit.exe

2013-11-26 08:35 . 2013-12-16 20:18        5769216        ----a-w-        c:\windows\system32\jscript9.dll

2013-11-26 08:28 . 2013-12-16 20:18        553472        ----a-w-        c:\windows\SysWow64\jscript9diag.dll

2013-11-26 08:16 . 2013-12-16 20:18        4243968        ----a-w-        c:\windows\SysWow64\jscript9.dll

2013-11-26 08:02 . 2013-12-16 20:18        1995264        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-11-26 07:48 . 2013-12-16 20:18        12996608        ----a-w-        c:\windows\system32\ieframe.dll

2013-11-26 07:32 . 2013-12-16 20:18        1928192        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-11-26 07:07 . 2013-12-16 20:18        2334208        ----a-w-        c:\windows\system32\wininet.dll

2013-11-26 06:40 . 2013-12-16 20:18        1395200        ----a-w-        c:\windows\system32\urlmon.dll

2013-11-26 06:34 . 2013-12-16 20:18        817664        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-11-26 06:33 . 2013-12-16 20:18        1820160        ----a-w-        c:\windows\SysWow64\wininet.dll

2013-11-25 23:11 . 2013-11-25 23:11        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-11-25 23:11 . 2013-11-25 23:11        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-11-25 23:11 . 2013-11-25 23:11        235008        ----a-w-        c:\windows\system32\elshyph.dll

2013-11-25 23:11 . 2013-11-25 23:11        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll

2013-11-25 23:11 . 2013-11-25 23:11        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2013-11-25 23:11 . 2013-11-25 23:11        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-11-25 23:11 . 2013-11-25 23:11        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll

2013-11-25 23:11 . 2013-11-25 23:11        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll

2013-11-25 23:11 . 2013-11-25 23:11        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll

2013-11-25 23:11 . 2013-11-25 23:11        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-11-25 23:11 . 2013-11-25 23:11        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-11-25 23:11 . 2013-11-25 23:11        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll

2013-11-25 23:11 . 2013-11-25 23:11        337408        ----a-w-        c:\windows\SysWow64\html.iec

2013-11-25 23:11 . 2013-11-25 23:11        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-11-25 23:11 . 2013-11-25 23:11        182272        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-11-25 23:11 . 2013-11-25 23:11        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-11-25 23:11 . 2013-11-25 23:11        139264        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-11-25 23:11 . 2013-11-25 23:11        13312        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-11-25 23:11 . 2013-11-25 23:11        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-11-25 23:11 . 2013-11-25 23:11        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-11-25 23:11 . 2013-11-25 23:11        942592        ----a-w-        c:\windows\system32\jsIntl.dll

2013-11-25 23:11 . 2013-11-25 23:11        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-11-25 23:11 . 2013-11-25 23:11        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2013-11-25 23:11 . 2013-11-25 23:11        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2013-11-25 23:11 . 2013-11-25 23:11        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-11-25 23:11 . 2013-11-25 23:11        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-11-25 23:11 . 2013-11-25 23:11        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-11-25 23:11 . 2013-11-25 23:11        616104        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-11-25 23:11 . 2013-11-25 23:11        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-11-25 23:11 . 2013-11-25 23:11        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-11-25 23:11 . 2013-11-25 23:11        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-11-25 23:11 . 2013-11-25 23:11        453120        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-11-25 23:11 . 2013-11-25 23:11        413696        ----a-w-        c:\windows\system32\html.iec

2013-11-25 23:11 . 2013-11-25 23:11        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll

2013-11-25 23:11 . 2013-11-25 23:11        296960        ----a-w-        c:\windows\system32\dxtrans.dll

2013-11-25 23:11 . 2013-11-25 23:11        263376        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-11-25 23:11 . 2013-11-25 23:11        247808        ----a-w-        c:\windows\system32\msls31.dll

2013-11-25 23:11 . 2013-11-25 23:11        243200        ----a-w-        c:\windows\system32\webcheck.dll

2013-11-25 23:11 . 2013-11-25 23:11        235520        ----a-w-        c:\windows\system32\url.dll

2013-11-25 23:11 . 2013-11-25 23:11        195584        ----a-w-        c:\windows\system32\msrating.dll

2013-11-25 23:11 . 2013-11-25 23:11        13312        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-11-25 23:11 . 2013-11-25 23:11        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-11-25 23:11 . 2013-11-25 23:11        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-11-25 23:11 . 2013-11-25 23:11        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-11-25 23:11 . 2013-11-25 23:11        105984        ----a-w-        c:\windows\system32\iesysprep.dll

2013-11-25 23:11 . 2013-11-25 23:11        30208        ----a-w-        c:\windows\system32\licmgr10.dll

2013-11-25 23:11 . 2013-11-25 23:11        84992        ----a-w-        c:\windows\system32\mshtmled.dll

2013-11-25 23:11 . 2013-11-25 23:11        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll

2013-11-25 23:11 . 2013-11-25 23:11        774144        ----a-w-        c:\windows\system32\jscript.dll

2013-11-25 23:11 . 2013-11-25 23:11        626176        ----a-w-        c:\windows\system32\msfeeds.dll

2013-11-25 23:11 . 2013-11-25 23:11        62464        ----a-w-        c:\windows\system32\pngfilt.dll

2013-11-25 23:11 . 2013-11-25 23:11        548352        ----a-w-        c:\windows\system32\vbscript.dll

2013-11-25 23:11 . 2013-11-25 23:11        48128        ----a-w-        c:\windows\system32\imgutil.dll

2013-11-25 23:11 . 2013-11-25 23:11        167424        ----a-w-        c:\windows\system32\iexpress.exe

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="g:\tools\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"DeathAdder"="c:\program files (x86)\Razer\DeathAdder\razerhid.exe" [2012-01-14 248832]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer9"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 WCMVCAM;WCMVCAM;c:\windows\system32\DRIVERS\wcmvcam64.sys;c:\windows\SYSNATIVE\DRIVERS\wcmvcam64.sys [x]

R3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [x]

R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]

R3 cleanhlp;cleanhlp;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 scvad_simple;SplitCam Virtual Microphone (WDM);c:\windows\system32\drivers\SplitCamAudio.sys;c:\windows\SYSNATIVE\drivers\SplitCamAudio.sys [x]

R3 splitcam_hd_driver;SplitCam Virtual Video Driver;c:\windows\system32\DRIVERS\splitcam_hd_driver.sys;c:\windows\SYSNATIVE\DRIVERS\splitcam_hd_driver.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 tapSF0901;Spotflux Virtual Network Device Driver;c:\windows\system32\DRIVERS\tapSF0901.sys;c:\windows\SYSNATIVE\DRIVERS\tapSF0901.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]

R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]

R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys;c:\windows\SYSNATIVE\Drivers\VBoxUSB.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

R4 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]

R4 a2AntiMalware;Emsisoft Anti-Malware 8.0 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x]

R4 FreemakeVideoCapture;FreemakeVideoCapture;g:\tools\Freemake\CaptureLib\CaptureLibService.exe;g:\tools\Freemake\CaptureLib\CaptureLibService.exe [x]

R4 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R4 OODefragAgent;O&O Defrag;c:\program files\OO Software\Defrag\oodag.exe;c:\program files\OO Software\Defrag\oodag.exe [x]

R4 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]

S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]

S1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [x]

S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]

S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]

S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]

S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]

S2 RzKLService;RzKLService;g:\tools\Razer Game Booster\RzKLService.exe;g:\tools\Razer Game Booster\RzKLService.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 danewFltr;NewDeathAdder Mouse;c:\windows\system32\drivers\danew.sys;c:\windows\SYSNATIVE\drivers\danew.sys [x]

S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv.sys;c:\windows\SYSNATIVE\DRIVERS\mcvidrv.sys [x]

S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys;c:\windows\SYSNATIVE\drivers\mcaudrv_x64.sys [x]

S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 VKbms;Razer Gaming Device;c:\windows\system32\DRIVERS\VKbms.sys;c:\windows\SYSNATIVE\DRIVERS\VKbms.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-02-04 18:59        1211720        ----a-w-        c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe

.

Contents of the 'Scheduled Tasks' folder

.

2014-02-05 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-26 19:51]

.

2014-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05 21:21]

.

2014-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05 21:21]

.

2014-02-05 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job

- c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08]

.

2014-02-05 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job

- c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-09-03 13651672]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]

"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]

"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-12-10 1100248]

"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2013-12-16 4464936]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: An OneNote s&enden - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.0.1

FF - ProfilePath - c:\users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/

FF - prefs.js: keyword.URL - 

FF - prefs.js: network.proxy.type - 0

FF - ExtSQL: 2013-12-19 04:52; {b9db16a4-6edc-47ec-a1f4-b86292ed211d}; c:\users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF - ExtSQL: 2013-12-19 04:52; netvideohunter@netvideohunter.com; c:\users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\extensions\netvideohunter@netvideohunter.com

FF - ExtSQL: 2013-12-19 08:12; helper@savefrom.net; c:\users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\extensions\helper@savefrom.net.xpi

.

- - - - ORPHANS REMOVED - - - -

.

BHO-{3706EE7C-3CAD-445D-8A43-03EBC3B75908} - (no file)

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]

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

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]

"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Other Running Processes ------------------------

.

c:\windows\SysWOW64\PnkBstrA.exe

c:\program files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe

c:\program files (x86)\Razer\DeathAdder\razertra.exe

c:\program files (x86)\Razer\DeathAdder\razerofa.exe

c:\program files (x86)\Razer\DeathAdder\vdDaemon.exe

.

**************************************************************************

.

Completion time: 2014-02-05  11:17:50 - machine was rebooted

ComboFix-quarantined-files.txt  2014-02-05 10:17

.

Pre-Run: 15 Verzeichnis(se), 17.979.416.576 Bytes frei

Post-Run: 17 Verzeichnis(se), 17.802.559.488 Bytes frei

.

- - End Of File - - 6CAD00387F67D572B6B6D40E86B34798

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.06.08
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Horst :: HORST-PC [Administrator]
 

06.02.2014 23:03:54

mbam-log-2014-02-06 (23-03-54).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 212645

Laufzeit: 1 Minute(n), 39 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

[CODE]AdwCleaner Logfile:

Code:

# AdwCleaner v3.018 - Bericht erstellt am 06/02/2014 um 23:10:01

# Updated 28/01/2014 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzername : Horst - HORST-PC

# Gestartet von : C:\Users\Horst\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v26.0 (de)
 

[ Datei : C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\prefs.js ]
 
 

[ Datei : C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\7we6ss0f.default\prefs.js ]
 
 

[ Datei : C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\eskmam7m.default\prefs.js ]
 
 

-\\ Google Chrome v32.0.1700.107
 

[ Datei : C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [7843 octets] - [31/12/2013 23:56:30]

AdwCleaner[R1].txt - [2865 octets] - [25/01/2014 01:42:31]

AdwCleaner[R2].txt - [2935 octets] - [25/01/2014 01:43:22]

AdwCleaner[R3].txt - [1655 octets] - [26/01/2014 20:27:10]

AdwCleaner[R4].txt - [1918 octets] - [05/02/2014 03:29:10]

AdwCleaner[R5].txt - [1660 octets] - [06/02/2014 23:09:33]

AdwCleaner[S0].txt - [7207 octets] - [31/12/2013 23:57:34]

AdwCleaner[S1].txt - [2304 octets] - [25/01/2014 01:44:29]

AdwCleaner[S2].txt - [1596 octets] - [26/01/2014 20:27:55]

AdwCleaner[S3].txt - [1865 octets] - [05/02/2014 03:29:51]

AdwCleaner[S4].txt - [1581 octets] - [06/02/2014 23:10:01]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1641 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.1 (02.04.2014:1)

OS: Windows 7 Ultimate x64

Ran by Horst on 06.02.2014 at 23:13:09,92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Horst\AppData\Roaming\mozilla\firefox\profiles\5e1sner9.default\minidumps [26 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.02.2014 at 23:16:25,41

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-02-2014

Ran by Horst (administrator) on HORST-PC on 06-02-2014 23:18:27

Running from C:\Users\Horst\Desktop

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Razer Inc.) G:\Tools\Razer Game Booster\RzKLService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe

() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe

() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [OODefragTray] - C:\Program Files\OO Software\Defrag\oodtray.exe [4464936 2013-12-16] (O&O Software GmbH)

HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248832 2012-01-14] ()

HKU\S-1-5-21-2522954031-3629111441-1662823005-1000\...\Run: [DAEMON Tools Lite] - G:\Tools\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x07C3E9EA0EEACE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCtBzyzztAtBzytA0FtA0FtN0D0Tzu0SyBtDtCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=610215439&ir=

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCtBzyzztAtBzytA0FtA0FtN0D0Tzu0SyBtDtCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=610215439&ir=

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: No Name - {3706EE7C-3CAD-445D-8A43-03EBC3B75908} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default

FF Homepage: hxxp://www.google.de/

FF Keyword.URL: user_pref("keyword.URL", "");

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\searchplugins\search_engine.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: ProxTube - Unblock YouTube - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\ich@maltegoetz.de [2013-12-11]

FF Extension: LavaFox V2 - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\info@djzig.com [2014-01-13]

FF Extension: exfm - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\jid0-IsXX48jx4obwoZPnzG6RQB0pK9A@jetpack [2013-11-25]

FF Extension: NetVideoHunter - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\netvideohunter@netvideohunter.com [2013-12-19]

FF Extension: WOT - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]

FF Extension: HP Detect - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-12-02]

FF Extension: DownloadHelper - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-12-19]

FF Extension: 1ClickMovie Downloader - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\clickMvd@clickMvd.com.xpi [2013-11-25]

FF Extension: SaveFrom.net helper - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\helper@savefrom.net.xpi [2013-12-19]

FF Extension: Magic Actions for YouTube™ - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2013-11-25]

FF Extension: NASA Night Launch - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\nasanightlaunch@example.com.xpi [2013-11-25]

FF Extension: Noia Fox options - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi [2014-01-17]

FF Extension: Toggle Persona - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\togglepersona@davidvincent.tld.xpi [2013-11-25]

FF Extension: Stylish - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2013-11-25]

FF Extension: Youtube Downloader - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{599B9024-EBA6-4258-95C5-9133F8D73856}.xpi [2013-11-25]

FF Extension: Noia Fox - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi [2013-11-25]

FF Extension: Soundcloud SUPER +2: Downloader and Recommender - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{988da70d-b78d-44a1-a9c7-ed11832a9e2e}.xpi [2013-11-25]

FF Extension: Downloads Window - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{a7213cf2-fa1e-4373-88ff-255d0abd3020}.xpi [2013-12-29]

FF Extension: Shine Bright Skin Aero - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi [2013-11-25]

FF Extension: Show my Password - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2013-12-29]

FF Extension: Adblock Plus - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-25]

FF Extension: Greasemonkey - C:\Users\Horst\AppData\Roaming\Mozilla\Firefox\Profiles\5e1sner9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-11-25]
 

Chrome: 

=======

CHR DefaultSearchProvider: Conduit Search

CHR DefaultSearchURL: hxxp://www.google.com

CHR DefaultNewTabURL: 

CHR Extension: (Google Docs) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-05]

CHR Extension: (Google Drive) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-05]

CHR Extension: (YouTube) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-05]

CHR Extension: (Hide My Ass! Web Proxy) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd [2014-01-05]

CHR Extension: (Google Search) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-05]

CHR Extension: (FastestFox for Chrome) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-12-24]

CHR Extension: (Google Wallet) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-05]

CHR Extension: (Gmail) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-05]
 

==================== Services (Whitelisted) =================
 

S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

S4 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4161512 2013-12-04] (Emsisoft GmbH)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-06] ()

S4 FreemakeVideoCapture; G:\Tools\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-12-12] (Ellora Assets Corp.)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)

S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

S4 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1656616 2013-12-16] (O&O Software GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-05] ()

R2 RzKLService; G:\Tools\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
 

==================== Drivers (Whitelisted) ====================
 

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [70960 2013-08-24] (Emsisoft GmbH)

R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)

S3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)

R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)

R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)

S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

S3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-01] (Duplex Secure Ltd.)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-11-25] (Spotflux, Inc.)

S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [113936 2013-12-18] (Oracle Corporation)

S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-06 23:18 - 2014-02-06 23:18 - 00000000 ____D () C:\Users\Horst\Desktop\FRST-OlderVersion

2014-02-06 23:16 - 2014-02-06 23:16 - 00000753 _____ () C:\Users\Horst\Desktop\JRT.txt

2014-02-06 23:13 - 2014-02-06 23:13 - 01037530 _____ (Thisisu) C:\Users\Horst\Desktop\JRT.exe

2014-02-06 23:09 - 2014-02-06 23:09 - 01166132 _____ () C:\Users\Horst\Desktop\adwcleaner.exe

2014-02-06 20:24 - 2014-02-06 20:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-05 11:17 - 2014-02-05 11:17 - 00031139 _____ () C:\ComboFix.txt

2014-02-05 06:34 - 2014-02-05 06:34 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard

2014-02-05 06:31 - 2014-02-05 06:31 - 00000755 _____ () C:\Users\Public\Desktop\Hearthstone.lnk

2014-02-05 06:08 - 2014-01-15 23:35 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-02-05 06:07 - 2014-01-16 00:13 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-02-05 06:07 - 2014-01-16 00:13 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-02-05 06:07 - 2014-01-15 22:53 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-02-05 06:07 - 2014-01-15 22:53 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-02-05 06:07 - 2014-01-15 22:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-02-05 06:07 - 2014-01-15 22:53 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-02-05 06:07 - 2014-01-15 22:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-02-05 06:07 - 2014-01-15 22:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-02-05 06:07 - 2014-01-13 23:31 - 03559557 _____ () C:\Windows\system32\nvcoproc.bin

2014-02-05 06:05 - 2014-01-16 00:13 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 18184976 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 14668008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-02-05 06:05 - 2014-01-16 00:13 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 03087112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 02711656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-02-05 06:05 - 2014-01-16 00:13 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-02-05 06:05 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-02-05 06:05 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-02-05 06:05 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-02-05 05:39 - 2014-02-05 05:39 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk

2014-02-05 05:38 - 2014-02-05 05:40 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-02-05 05:38 - 2014-02-05 05:39 - 00000000 ____D () C:\Program Files\HitmanPro

2014-02-05 04:32 - 2014-02-06 23:18 - 00017198 _____ () C:\Users\Horst\Desktop\FRST.txt

2014-02-05 04:32 - 2014-02-05 05:21 - 00024216 _____ () C:\Users\Horst\Desktop\Addition.txt

2014-02-05 04:31 - 2014-02-06 23:18 - 02079744 _____ (Farbar) C:\Users\Horst\Desktop\FRST64.exe

2014-02-05 04:01 - 2014-02-05 11:16 - 00003600 _____ () C:\Windows\PFRO.log

2014-02-05 04:00 - 2014-02-05 04:00 - 00002497 _____ () C:\Users\Public\Desktop\O&O Defrag.lnk

2014-02-05 04:00 - 2014-02-05 04:00 - 00000000 ____D () C:\Program Files\OO Software

2014-02-05 03:44 - 2014-02-05 03:44 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk

2014-02-05 03:44 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-02-05 03:44 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-02-05 03:43 - 2014-02-05 05:54 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA

2014-02-05 03:41 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-02-05 03:41 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-02-05 03:41 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-02-05 03:39 - 2014-02-05 03:39 - 00000000 ____D () C:\NVIDIA

2014-02-05 03:38 - 2014-02-06 23:10 - 00003279 _____ () C:\Windows\setupact.log

2014-02-05 03:38 - 2014-02-05 03:38 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-05 03:32 - 2014-02-05 04:10 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige

2014-02-05 03:31 - 2014-02-06 23:10 - 00210891 _____ () C:\Windows\WindowsUpdate.log

2014-02-05 02:42 - 2014-02-05 02:42 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-05 02:21 - 2014-02-05 02:21 - 00000751 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2014-02-04 21:58 - 2014-02-04 21:58 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\www.shadowexplorer.com

2014-02-03 16:25 - 2014-02-06 01:32 - 00000000 ____D () C:\Users\Horst\AppData\Local\Battle.net

2014-02-03 16:25 - 2014-02-05 06:30 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Battle.net

2014-02-03 16:25 - 2014-02-03 16:25 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-02-03 16:21 - 2014-02-03 16:21 - 00000000 ____D () C:\ProgramData\Battle.net

2014-02-03 01:47 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-02-03 01:44 - 2014-02-03 01:45 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-01 18:16 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\Horst\AppData\Local\EdgeOfReality

2014-02-01 17:48 - 2014-02-01 17:51 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Awesomium

2014-01-29 20:34 - 2014-01-29 20:34 - 00000209 _____ () C:\Users\Horst\Desktop\Rust.url

2014-01-28 23:20 - 2014-01-28 23:25 - 00000000 ____D () C:\Users\Horst\Desktop\Active-File-Recovery-Professional-12.0.3

2014-01-28 20:26 - 2014-01-28 23:23 - 00000000 ____D () C:\Program Files\LSoft Technologies

2014-01-26 23:56 - 2014-01-26 23:56 - 00000000 ____D () C:\Users\Horst\AppData\Local\O&O

2014-01-26 23:55 - 2014-01-26 23:57 - 00000000 ____D () C:\Windows\system32\oodag

2014-01-26 23:55 - 2014-01-26 23:55 - 00000000 ____D () C:\ProgramData\OO Software

2014-01-26 19:20 - 2014-02-05 03:23 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-01-26 19:20 - 2014-02-05 02:42 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-01-26 19:06 - 2014-02-06 19:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job

2014-01-26 19:06 - 2014-02-06 02:00 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job

2014-01-26 19:06 - 2014-01-26 19:06 - 00003588 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1

2014-01-26 19:06 - 2014-01-26 19:06 - 00003514 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f

2014-01-26 19:06 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SUPERAntiSpyware.com

2014-01-26 19:05 - 2014-01-26 23:49 - 00001965 _____ () C:\Users\Horst\Desktop\SUPERAntiSpyware Professional.lnk

2014-01-26 19:05 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:06 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:05 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com

2014-01-25 01:57 - 2014-01-25 02:04 - 00000000 ____D () C:\Users\Horst\AppData\Local\ManyCam

2014-01-25 01:57 - 2014-01-25 01:57 - 00001019 _____ () C:\Users\Public\Desktop\ManyCam.lnk

2014-01-25 01:38 - 2014-01-25 01:38 - 00000000 _____ () C:\autoexec.bat

2014-01-25 01:37 - 2014-01-25 01:41 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-01-25 01:37 - 2014-01-25 01:37 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-01-25 01:19 - 2014-01-25 02:04 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\ManyCam

2014-01-25 01:19 - 2014-01-25 01:57 - 00000000 ____D () C:\Program Files (x86)\ManyCam

2014-01-25 01:07 - 2014-01-25 01:08 - 00000000 ____D () C:\ProgramData\webcam 7

2014-01-25 01:02 - 2013-04-24 09:45 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00080896 _____ () C:\Windows\SysWOW64\ff_vfw.dll

2014-01-25 01:02 - 2013-04-24 09:45 - 00000590 _____ () C:\Windows\SysWOW64\ff_vfw.dll.manifest

2014-01-25 00:54 - 2014-02-03 15:37 - 00000000 ____D () C:\Program Files (x86)\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000939 _____ () C:\Users\Horst\Desktop\Open Broadcaster Software.lnk

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files\OBS

2014-01-25 00:50 - 2014-01-25 00:50 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\WebcamMax

2014-01-25 00:39 - 2014-01-25 00:39 - 00000000 ____D () C:\Program Files (x86)\IPCameraDSFilter

2014-01-24 21:56 - 2014-01-24 23:57 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-01-18 02:09 - 2014-02-05 03:31 - 00000000 ____D () C:\Windows\Minidump

2014-01-17 20:51 - 2014-01-17 20:51 - 00000000 ____D () C:\ProgramData\McAfee

2014-01-16 16:21 - 2014-01-16 16:21 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\PDF Architect

2014-01-15 10:34 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 10:34 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 10:34 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-12 18:37 - 2014-01-12 18:37 - 00355840 _____ () C:\Windows\SysWOW64\LiveWrapRTSP.dll

2014-01-08 02:03 - 2014-01-08 02:03 - 00000000 ____D () C:\Users\Horst\VirtualBox VMs

2014-01-08 02:02 - 2014-01-08 05:47 - 00000000 ____D () C:\Users\Horst\.VirtualBox

2014-01-08 02:01 - 2013-12-18 17:19 - 00252688 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys

2014-01-08 02:00 - 2013-12-18 17:16 - 00126736 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys

2014-01-08 00:53 - 2014-01-25 01:41 - 00000000 ____D () C:\Windows\system32\appmgmt

2014-01-07 14:54 - 2014-01-07 14:54 - 00000000 ____D () C:\Users\Horst\AppData\Local\IsolatedStorage

2014-01-07 14:52 - 2014-01-07 15:17 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-01-07 14:51 - 2014-01-25 01:11 - 00000000 ____D () C:\ProgramData\Apple

2014-01-07 14:51 - 2014-01-07 14:51 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple
 

==================== One Month Modified Files and Folders =======
 

2014-02-06 23:18 - 2014-02-06 23:18 - 00000000 ____D () C:\Users\Horst\Desktop\FRST-OlderVersion

2014-02-06 23:18 - 2014-02-05 04:32 - 00017198 _____ () C:\Users\Horst\Desktop\FRST.txt

2014-02-06 23:18 - 2014-02-05 04:31 - 02079744 _____ (Farbar) C:\Users\Horst\Desktop\FRST64.exe

2014-02-06 23:18 - 2013-12-29 12:09 - 00000000 ____D () C:\FRST

2014-02-06 23:17 - 2013-12-18 23:52 - 00013665 _____ () C:\Users\Horst\Desktop\Neues Textdokument.txt

2014-02-06 23:17 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-06 23:17 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-06 23:16 - 2014-02-06 23:16 - 00000753 _____ () C:\Users\Horst\Desktop\JRT.txt

2014-02-06 23:16 - 2009-07-14 18:58 - 00699376 _____ () C:\Windows\system32\perfh007.dat

2014-02-06 23:16 - 2009-07-14 18:58 - 00149552 _____ () C:\Windows\system32\perfc007.dat

2014-02-06 23:16 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-06 23:13 - 2014-02-06 23:13 - 01037530 _____ (Thisisu) C:\Users\Horst\Desktop\JRT.exe

2014-02-06 23:13 - 2014-02-05 03:31 - 00210891 _____ () C:\Windows\WindowsUpdate.log

2014-02-06 23:11 - 2013-12-01 04:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-02-06 23:10 - 2014-02-05 03:38 - 00003279 _____ () C:\Windows\setupact.log

2014-02-06 23:10 - 2013-12-31 23:56 - 00000000 ____D () C:\AdwCleaner

2014-02-06 23:10 - 2013-12-15 04:50 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-06 23:10 - 2013-12-05 22:21 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-06 23:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-06 23:09 - 2014-02-06 23:09 - 01166132 _____ () C:\Users\Horst\Desktop\adwcleaner.exe

2014-02-06 23:09 - 2013-11-26 19:40 - 00000000 ____D () C:\Users\Horst\AppData\Local\PMB Files

2014-02-06 22:32 - 2013-12-05 22:21 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-06 22:32 - 2013-11-26 03:05 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-06 20:24 - 2014-02-06 20:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-06 20:02 - 2013-12-16 21:50 - 00000000 ____D () C:\Users\Horst\AppData\Local\DayZ

2014-02-06 19:06 - 2014-01-26 19:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f.job

2014-02-06 19:02 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-06 02:00 - 2014-01-26 19:06 - 00000510 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1.job

2014-02-06 01:32 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Battle.net

2014-02-05 11:17 - 2014-02-05 11:17 - 00031139 _____ () C:\ComboFix.txt

2014-02-05 11:17 - 2013-12-30 12:25 - 00000000 ____D () C:\Qoobox

2014-02-05 11:16 - 2014-02-05 04:01 - 00003600 _____ () C:\Windows\PFRO.log

2014-02-05 11:16 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini

2014-02-05 11:10 - 2013-12-19 23:08 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware

2014-02-05 09:49 - 2013-12-05 17:56 - 00000000 ____D () C:\Windows\pss

2014-02-05 09:44 - 2013-12-30 12:25 - 05180173 ____R (Swearware) C:\Users\Horst\Desktop\ComboFix.exe

2014-02-05 06:34 - 2014-02-05 06:34 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard

2014-02-05 06:31 - 2014-02-05 06:31 - 00000755 _____ () C:\Users\Public\Desktop\Hearthstone.lnk

2014-02-05 06:30 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Battle.net

2014-02-05 06:08 - 2013-11-25 20:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-05 06:07 - 2013-11-25 20:32 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-02-05 06:07 - 2013-11-25 20:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-02-05 06:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help

2014-02-05 05:54 - 2014-02-05 03:43 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA

2014-02-05 05:40 - 2014-02-05 05:38 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-02-05 05:39 - 2014-02-05 05:39 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk

2014-02-05 05:39 - 2014-02-05 05:38 - 00000000 ____D () C:\Program Files\HitmanPro

2014-02-05 05:21 - 2014-02-05 04:32 - 00024216 _____ () C:\Users\Horst\Desktop\Addition.txt

2014-02-05 04:50 - 2013-11-25 19:40 - 00000000 ____D () C:\Users\Horst

2014-02-05 04:10 - 2014-02-05 03:32 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige

2014-02-05 04:10 - 2013-11-26 01:11 - 00007630 _____ () C:\Users\Horst\AppData\Local\Resmon.ResmonCfg

2014-02-05 04:00 - 2014-02-05 04:00 - 00002497 _____ () C:\Users\Public\Desktop\O&O Defrag.lnk

2014-02-05 04:00 - 2014-02-05 04:00 - 00000000 ____D () C:\Program Files\OO Software

2014-02-05 03:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-02-05 03:44 - 2014-02-05 03:44 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk

2014-02-05 03:39 - 2014-02-05 03:39 - 00000000 ____D () C:\NVIDIA

2014-02-05 03:38 - 2014-02-05 03:38 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-05 03:31 - 2014-01-18 02:09 - 00000000 ____D () C:\Windows\Minidump

2014-02-05 03:31 - 2013-12-01 19:12 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\DAEMON Tools Lite

2014-02-05 03:23 - 2014-01-26 19:20 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-05 03:01 - 2013-12-04 21:40 - 00000000 ____D () C:\Users\Horst\AppData\Local\NVIDIA Corporation

2014-02-05 03:00 - 2013-11-30 18:53 - 00000000 ____D () C:\Program Files (x86)\Thread Manager

2014-02-05 02:42 - 2014-02-05 02:42 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-05 02:42 - 2014-01-26 19:20 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-05 02:22 - 2013-12-05 05:40 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\vlc

2014-02-05 02:21 - 2014-02-05 02:21 - 00000751 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2014-02-04 21:58 - 2014-02-04 21:58 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\www.shadowexplorer.com

2014-02-04 20:53 - 2013-11-26 19:40 - 00000000 ____D () C:\ProgramData\PMB Files

2014-02-03 16:25 - 2014-02-03 16:25 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

2014-02-03 16:25 - 2014-02-03 16:25 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-02-03 16:21 - 2014-02-03 16:21 - 00000000 ____D () C:\ProgramData\Battle.net

2014-02-03 15:37 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files (x86)\OBS

2014-02-03 01:45 - 2014-02-03 01:44 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-02-03 01:45 - 2013-11-29 21:08 - 00000000 ____D () C:\ProgramData\Oracle

2014-02-03 01:45 - 2013-11-29 21:07 - 00000000 ____D () C:\Program Files (x86)\Java

2014-02-01 18:16 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\Horst\AppData\Local\EdgeOfReality

2014-02-01 17:51 - 2014-02-01 17:48 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Awesomium

2014-01-29 20:34 - 2014-01-29 20:34 - 00000209 _____ () C:\Users\Horst\Desktop\Rust.url

2014-01-29 20:00 - 2013-12-01 19:27 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-28 23:25 - 2014-01-28 23:20 - 00000000 ____D () C:\Users\Horst\Desktop\Active-File-Recovery-Professional-12.0.3

2014-01-28 23:23 - 2014-01-28 20:26 - 00000000 ____D () C:\Program Files\LSoft Technologies

2014-01-28 23:01 - 2013-11-30 10:47 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apps\2.0

2014-01-28 20:20 - 2013-12-01 19:47 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\TeamViewer

2014-01-26 23:57 - 2014-01-26 23:55 - 00000000 ____D () C:\Windows\system32\oodag

2014-01-26 23:56 - 2014-01-26 23:56 - 00000000 ____D () C:\Users\Horst\AppData\Local\O&O

2014-01-26 23:55 - 2014-01-26 23:55 - 00000000 ____D () C:\ProgramData\OO Software

2014-01-26 23:49 - 2014-01-26 19:05 - 00001965 _____ () C:\Users\Horst\Desktop\SUPERAntiSpyware Professional.lnk

2014-01-26 19:06 - 2014-01-26 19:06 - 00003588 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d319197d-9400-4fe0-b01d-061b91d4d3a1

2014-01-26 19:06 - 2014-01-26 19:06 - 00003514 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task d520f79a-15e0-4d3c-813f-2b69bbd4ac5f

2014-01-26 19:06 - 2014-01-26 19:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SUPERAntiSpyware.com

2014-01-26 19:06 - 2014-01-26 19:05 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-01-26 19:06 - 2014-01-26 19:05 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-01-26 19:05 - 2014-01-26 19:05 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com

2014-01-25 02:04 - 2014-01-25 01:57 - 00000000 ____D () C:\Users\Horst\AppData\Local\ManyCam

2014-01-25 02:04 - 2014-01-25 01:19 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\ManyCam

2014-01-25 01:57 - 2014-01-25 01:57 - 00001019 _____ () C:\Users\Public\Desktop\ManyCam.lnk

2014-01-25 01:57 - 2014-01-25 01:19 - 00000000 ____D () C:\Program Files (x86)\ManyCam

2014-01-25 01:53 - 2014-01-02 13:35 - 00987425 _____ () C:\Users\Horst\Desktop\SecurityCheck.exe

2014-01-25 01:52 - 2013-11-26 03:16 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Notepad++

2014-01-25 01:41 - 2014-01-25 01:37 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-01-25 01:41 - 2014-01-08 00:53 - 00000000 ____D () C:\Windows\system32\appmgmt

2014-01-25 01:38 - 2014-01-25 01:38 - 00000000 _____ () C:\autoexec.bat

2014-01-25 01:37 - 2014-01-25 01:37 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-01-25 01:11 - 2014-01-07 14:51 - 00000000 ____D () C:\ProgramData\Apple

2014-01-25 01:08 - 2014-01-25 01:07 - 00000000 ____D () C:\ProgramData\webcam 7

2014-01-25 00:54 - 2014-01-25 00:54 - 00000939 _____ () C:\Users\Horst\Desktop\Open Broadcaster Software.lnk

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\OBS

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-01-25 00:54 - 2014-01-25 00:54 - 00000000 ____D () C:\Program Files\OBS

2014-01-25 00:50 - 2014-01-25 00:50 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\WebcamMax

2014-01-25 00:39 - 2014-01-25 00:39 - 00000000 ____D () C:\Program Files (x86)\IPCameraDSFilter

2014-01-24 23:57 - 2014-01-24 21:56 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-01-22 20:41 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini

2014-01-19 08:33 - 2013-11-25 19:59 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-01-17 20:51 - 2014-01-17 20:51 - 00000000 ____D () C:\ProgramData\McAfee

2014-01-17 20:51 - 2013-11-26 03:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-17 20:51 - 2013-11-26 03:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-17 20:51 - 2013-11-26 03:05 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-17 20:51 - 2013-11-26 00:46 - 00000000 ____D () C:\Users\Horst\AppData\Local\Adobe

2014-01-16 16:21 - 2014-01-16 16:21 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\PDF Architect

2014-01-16 00:13 - 2014-02-05 06:07 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2014-01-16 00:13 - 2014-02-05 06:07 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 18184976 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 14668008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-01-16 00:13 - 2014-02-05 06:05 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 03087112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 02711656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-01-16 00:13 - 2014-02-05 06:05 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-01-15 23:35 - 2014-02-05 06:08 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-01-15 22:53 - 2014-02-05 06:07 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-01-15 22:53 - 2014-02-05 06:07 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-01-15 22:53 - 2014-02-05 06:07 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-01-15 22:53 - 2014-02-05 06:07 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-01-15 22:53 - 2014-02-05 06:07 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-01-15 22:53 - 2014-02-05 06:07 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-01-15 18:26 - 2009-07-14 05:45 - 00422032 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 14:55 - 2013-11-25 20:08 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 14:54 - 2013-11-25 20:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-13 23:31 - 2014-02-05 06:07 - 03559557 _____ () C:\Windows\system32\nvcoproc.bin

2014-01-12 18:37 - 2014-01-12 18:37 - 00355840 _____ () C:\Windows\SysWOW64\LiveWrapRTSP.dll

2014-01-09 23:58 - 2013-11-26 00:54 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-01-08 05:47 - 2014-01-08 02:02 - 00000000 ____D () C:\Users\Horst\.VirtualBox

2014-01-08 05:27 - 2013-12-14 03:04 - 00000665 _____ () C:\Users\Horst\Desktop\FurMark.lnk

2014-01-08 02:03 - 2014-01-08 02:03 - 00000000 ____D () C:\Users\Horst\VirtualBox VMs

2014-01-07 15:17 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Apple Computer

2014-01-07 14:54 - 2014-01-07 14:54 - 00000000 ____D () C:\Users\Horst\AppData\Local\IsolatedStorage

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple Computer

2014-01-07 14:52 - 2014-01-07 14:52 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-01-07 14:51 - 2014-01-07 14:51 - 00000000 ____D () C:\Users\Horst\AppData\Local\Apple
 

Some content of TEMP:

====================

C:\Users\Horst\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-29 02:33
 

==================== End Of Log ============================

--- --- ---

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)