Trojaner-Board - Trojaner nationzoom auf Windows 8 wie werde ich ihn wieder los

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Trojaner nationzoom auf Windows 8 wie werde ich ihn wieder los (https://www.trojaner-board.de/150070-trojaner-nationzoom-windows-8-ihn-los.html)

Trojaner nationzoom auf Windows 8 wie werde ich ihn wieder los

Keine Ahnung wie aber plötzlich habe ich mir dieses Teil eingefangen und werde es leider nicht mehr los. Habe mich heute hier angemeldet und hoffe auf eure Hilfe.

Hier einige Eckdaten
Beriebssystem Windows 8.1 / 64 bit
Explorer 11.0

eingesetzte Schutzprogramme
McAfee Internet Security
Malwarebytes Anti-Malware (Freeware)
Spybot S&D (Freeware)

vor 2 Tagen wurde McAfee fündig trotz aller Reinigungsläufe meldet sich als Startbildschirm
nationzoom. Da ich mein LP geschäftlich im Netz nutze habe ich diesen erstmal entfernt um keine weiteren Schäden zu verursachen.

Ich wäre sehr froh wenn mir hier ein Fachmann weiterhelfen könnte

herzlichen Dank und Grüße aus Berlin
schulle

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-02-2014

Ran by Schulle (administrator) on SCHULLE1 on 21-02-2014 22:18:07

Running from C:\Users\Schulle\AppData\Local\Microsoft\Windows\INetCache\IE\U08XVG52

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\WINDOWS\system32\DptfParticipantProcessorService.exe

(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe

() C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe

(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe

() C:\ProgramData\DatacardService\HWDeviceService64.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe

(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\windows\system32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Windows\System32\skydrive.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Safer-Networking Ltd.) D:\Sicher\Spybot - Search & Destroy 2\SDTray.exe

(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe

(Safer-Networking Ltd.) d:\Sicher\Spybot - Search & Destroy 2\SDUpdate.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcupdate.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [DptfPolicyLpmServiceHelper] - C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)

HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-31] ()

HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-09-19] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)

HKLM-x32\...\Run: [SDTray] - d:\Sicher\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [SkyDrive] - C:\Users\Schulle\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [iCloudServices] - D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [ApplePhotoStreams] - D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [lollipop_02020906] - "c:\users\schulle\appdata\local\lollipop\lollipop_02020906.exe" lollipop_02020906

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [Spybot-S&D Cleaning] - D:\Sicher\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

Startup: C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX&q={searchTerms}

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX&q={searchTerms}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387375581&from=tugs&uid=HitachiXHTS545050A7E380_TEJ51239DDDUTXDDDUTXX&q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - d:\Sicher\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
 

==================== Services (Whitelisted) =================
 

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-08-31] (Qualcomm Atheros Commnucations)

R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [29056 2012-07-30] ()

R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [30592 2012-07-30] ()

R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2013-04-12] ()

R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-30] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-09-24] (McAfee, Inc.)

S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-09-20] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)

R2 mfevtp; C:\windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-31] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-04-12] (Bytemobile, Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-31] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)

R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-07-13] (Intel Corporation)

R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-07-13] (Intel Corporation)

R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-07-13] (Intel Corporation)

R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96064 2012-07-13] (Intel Corporation)

R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [228672 2012-07-13] (Intel Corporation)

R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [361792 2012-07-13] (Intel Corporation)

R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)

R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-30] (Intel Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [390552 2013-09-20] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95984 2013-09-20] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-04-12] (Bytemobile, Inc.)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-21 22:17 - 2014-02-21 22:18 - 00000000 ____D () C:\FRST

2014-02-21 22:09 - 2014-02-21 22:09 - 00000000 ___SH () C:\DkHyperbootSync

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 11:58 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll

2014-02-16 09:24 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys

2014-02-16 09:24 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll

2014-02-16 08:51 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2014-02-16 08:51 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2014-02-16 08:51 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys

2014-02-16 08:51 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll

2014-02-16 08:51 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll

2014-02-16 08:51 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2014-02-16 08:51 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-02-16 08:51 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2014-02-16 08:51 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-02-16 08:51 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2014-02-16 08:51 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2014-02-16 08:51 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-02-16 08:51 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-02-16 08:51 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2014-02-16 08:51 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-02-16 08:51 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-02-16 08:51 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll

2014-02-16 08:51 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-02-16 08:51 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys

2014-02-16 08:51 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2014-02-16 08:51 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-02-16 08:51 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-02-16 08:51 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-02-16 08:51 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll

2014-02-16 08:51 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-02-16 08:51 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2014-02-16 08:51 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-02-16 08:51 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-02-16 08:51 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-02-16 08:51 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 19:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-15 19:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-15 19:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-15 19:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-15 19:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-15 19:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-15 19:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-15 19:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-15 19:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-15 19:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-15 19:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-15 19:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-15 19:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-15 19:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-15 19:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-15 19:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-15 19:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-15 19:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-15 19:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-15 19:58 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2014-02-15 19:58 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2014-02-15 19:58 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-02-15 19:58 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-02-15 19:58 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2014-02-15 19:58 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2014-02-15 19:56 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe

2014-02-15 19:56 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe

2014-02-15 19:56 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-02-15 19:56 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-02-15 19:56 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-02-15 19:56 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-02-15 19:56 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-02-15 19:56 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-02-15 19:56 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-02-15 19:56 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-02-15 19:56 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-02-15 19:55 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-02-15 19:55 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-02-15 19:55 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-02-08 09:42 - 2014-02-16 09:25 - 00000078 _____ () C:\WINDOWS\setupact.log

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 11:04 - 2014-02-02 11:22 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\systweak

2014-02-02 11:04 - 2014-02-02 11:04 - 00003108 _____ () C:\WINDOWS\System32\Tasks\RegClean Pro

2014-02-02 11:04 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\WINDOWS\system32\roboot64.exe

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:25 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll

2014-02-02 10:25 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe

2014-02-02 10:25 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-02-02 10:25 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-02-02 10:24 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-02-02 10:16 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00593000 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00246804 _____ () C:\WINDOWS\system32\Drivers\AtherosBT.bin

2014-01-28 15:32 - 2014-01-28 15:32 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00048660 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00048148 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046972 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046268 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046212 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00037796 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001926 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001922 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001802 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001796 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001242 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001228 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001214 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001198 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001192 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000296 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000278 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu
 

==================== One Month Modified Files and Folders =======
 

2014-02-21 22:18 - 2014-02-21 22:17 - 00000000 ____D () C:\FRST

2014-02-21 22:12 - 2013-10-23 09:22 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A731646C-D75B-4CAE-840A-BB0008317A5A}

2014-02-21 22:12 - 2013-10-23 08:23 - 02072184 _____ () C:\WINDOWS\WindowsUpdate.log

2014-02-21 22:09 - 2014-02-21 22:09 - 00000000 ___SH () C:\DkHyperbootSync

2014-02-21 22:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-02-20 20:35 - 2013-03-20 12:47 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-20 19:57 - 2013-03-22 10:54 - 00000000 ____D () C:\Users\Schulle\Documents\Outlook-Dateien

2014-02-20 19:45 - 2013-04-19 07:12 - 00000000 ____D () C:\Users\Schulle\AppData\Local\C7412C68-0DE5-4B87-9342-8292F8C1135D.aplzod

2014-02-20 19:25 - 2013-03-23 18:23 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-02-20 19:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-02-20 18:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-02-20 17:49 - 2013-10-23 09:21 - 00000000 __RDO () C:\Users\Schulle\SkyDrive

2014-02-20 17:49 - 2013-03-20 12:42 - 00000401 _____ () C:\Users\Schulle\AppData\Roaming\sp_data.sys

2014-02-20 13:03 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-02-20 13:03 - 2013-09-30 04:56 - 00773008 _____ () C:\WINDOWS\system32\perfh007.dat

2014-02-20 13:03 - 2013-09-30 04:56 - 00162310 _____ () C:\WINDOWS\system32\perfc007.dat

2014-02-20 12:57 - 2013-12-18 15:06 - 00000000 ____D () C:\ProgramData\WPM

2014-02-20 12:57 - 2013-09-29 20:04 - 00034704 _____ () C:\WINDOWS\PFRO.log

2014-02-20 12:57 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-02-20 12:57 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-16 16:43 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-02-16 16:43 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-02-16 16:42 - 2013-08-22 15:44 - 00473776 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-02-16 16:40 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-02-16 13:57 - 2013-03-22 07:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-02-16 13:53 - 2012-07-26 06:26 - 00000199 _____ () C:\WINDOWS\win.ini

2014-02-16 13:51 - 2013-08-15 06:18 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-02-16 13:50 - 2013-03-22 06:54 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-02-16 09:27 - 2013-10-22 08:50 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-16 09:25 - 2014-02-08 09:42 - 00000078 _____ () C:\WINDOWS\setupact.log

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 11:54 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-02-15 10:51 - 2013-10-23 08:28 - 00000000 ____D () C:\Users\Schulle

2014-02-15 10:13 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports

2014-02-08 10:16 - 2013-03-20 12:39 - 00000000 ____D () C:\Users\Schulle\AppData\Local\Packages

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-06 13:16 - 2014-02-15 19:58 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-15 19:58 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-15 19:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-15 19:58 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-15 19:58 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-15 19:58 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-15 19:58 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-06 11:49 - 2014-02-15 19:58 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-15 19:58 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-15 19:58 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-15 19:58 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-15 19:58 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-15 19:58 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-06 11:11 - 2014-02-15 19:58 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-15 19:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-15 19:58 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-15 19:58 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-06 10:47 - 2014-02-15 19:58 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-15 19:58 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-15 19:58 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-06 10:22 - 2014-02-15 19:58 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-15 19:58 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-15 19:58 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-15 19:58 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-15 19:58 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-15 19:58 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-15 19:58 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-15 19:58 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-15 19:58 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 11:22 - 2014-02-02 11:04 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\systweak

2014-02-02 11:14 - 2013-12-18 15:07 - 00002089 _____ () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk

2014-02-02 11:04 - 2014-02-02 11:04 - 00003108 _____ () C:\WINDOWS\System32\Tasks\RegClean Pro

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:53 - 2012-10-24 23:16 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite

2014-02-02 10:33 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-02-02 10:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-28 15:32 - 2014-01-28 15:32 - 00593000 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00246804 _____ () C:\WINDOWS\system32\Drivers\AtherosBT.bin

2014-01-28 15:32 - 2014-01-28 15:32 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00048660 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00048148 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046972 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046268 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046212 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00037796 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001926 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001922 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001802 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001796 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001242 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001228 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001214 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001198 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001192 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000296 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000278 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu
 

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-20 18:31
 

==================== End Of Log ============================

--- --- ---

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.

Starte die sc-cleaner.exe mit einem Doppelclick.
Bestätige die Meldung Shortcut Cleaner Finished am Ende des Suchlaufs mit Ok.
Eine Logdatei wird sich öffnen (sc-cleaner.txt).
Poste den Inhalt mit deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

alwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.22.03
 

Windows 8 x64 NTFS

Internet Explorer 11.0.9600.16518

Schulle :: SCHULLE1 [Administrator]
 

22.02.2014 18:40:13

mbam-log-2014-02-22 (18-40-13).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 215168

Laufzeit: 3 Minute(n), 4 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Code:

alwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.22.03
 

Windows 8 x64 NTFS

Internet Explorer 11.0.9600.16518

Schulle :: SCHULLE1 [Administrator]
 

22.02.2014 19:09:28

mbam-log-2014-02-22 (19-09-28).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 215184

Laufzeit: 2 Minute(n), 39 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 4

HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} (PUP.Optional.DynConIE.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 2

HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 1590556384844316671 -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 1590556384844316671 -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 1

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP27CDC784-5863-45CF-AD09-B7B31260784F&SSPV=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
 

Infizierte Verzeichnisse: 1

C:\Users\Schulle\AppData\Local\Temp\CT3324066 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Code:

# AdwCleaner v3.019 - Bericht erstellt am 22/02/2014 um 19:27:47

# Aktualisiert 17/02/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Schulle - SCHULLE1

# Gestartet von : C:\Users\Schulle\AppData\Local\Temp\Temp1_18904a7ed815e397ba88b76edc5e953c_adwcleaner.zip\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\Program Files (x86)\sweetpacks bundle uninstaller

Ordner Gelöscht : C:\Users\Schulle\AppData\Roaming\Systweak

Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe

Datei Gelöscht : C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\lollipop.lnk

Datei Gelöscht : C:\WINDOWS\System32\Tasks\RegClean Pro
 

***** [ Verknüpfungen ] *****
 

Verknüpfung Desinfiziert : C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

Verknüpfung Desinfiziert : C:\Users\Schulle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

Verknüpfung Desinfiziert : C:\Users\Schulle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [lollipop_02020906]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322852232}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\IM

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\Software\supWPM
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16518
 

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
 

*************************
 

AdwCleaner[R0].txt - [3764 octets] - [22/02/2014 19:24:01]

AdwCleaner[S0].txt - [2679 octets] - [22/02/2014 19:27:47]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2739 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.2 (02.20.2014:1)

OS: Windows 8.1 x64

Ran by Schulle on 22.02.2014 at 19:43:16,20

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 22.02.2014 at 19:48:39,38

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

Shortcut Cleaner 1.2.8 by Lawrence Abrams (Grinler)

hxxp://www.bleepingcomputer.com/

Copyright 2008-2014 BleepingComputer.com

More Information about Shortcut Cleaner can be found at this link:

 hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/
 

Windows Version: Windows 8.1 

Program started at: 02/22/2014 07:58:37 PM.
 

Scanning for registry hijacks:
 

 * No issues found in the Registry.
 

Searching for Hijacked Shortcuts:
 

Searching C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\
 

Searching C:\ProgramData\Microsoft\Windows\Start Menu\
 

Searching C:\Users\Schulle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\
 

Searching C:\Users\Public\Desktop\
 

Searching C:\Users\Schulle\Desktop
 
 

0 bad shortcuts found.
 

Program finished at: 02/22/2014 07:58:37 PM

Execution time: 0 hours(s), 0 minute(s), and 0 seconds(s)

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01

Ran by Schulle (administrator) on SCHULLE1 on 22-02-2014 20:01:20

Running from C:\Users\Schulle\Desktop

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\WINDOWS\system32\DptfParticipantProcessorService.exe

(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe

() C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe

(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe

() C:\ProgramData\DatacardService\HWDeviceService64.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe

(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(McAfee, Inc.) C:\windows\system32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe

(Microsoft Corporation) C:\Windows\System32\skydrive.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Safer-Networking Ltd.) D:\Sicher\Spybot - Search & Destroy 2\SDTray.exe

(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcupdate.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [DptfPolicyLpmServiceHelper] - C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)

HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-31] ()

HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-09-19] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [SDTray] - d:\Sicher\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [SkyDrive] - C:\Users\Schulle\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [iCloudServices] - D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [ApplePhotoStreams] - D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [Spybot-S&D Cleaning] - D:\Sicher\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

Startup: C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - d:\Sicher\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
 

==================== Services (Whitelisted) =================
 

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-08-31] (Qualcomm Atheros Commnucations)

R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [29056 2012-07-30] ()

R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [30592 2012-07-30] ()

R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2013-04-12] ()

R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-30] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)

S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)

R2 mfevtp; C:\windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-31] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-04-12] (Bytemobile, Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-31] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)

R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-07-13] (Intel Corporation)

R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-07-13] (Intel Corporation)

R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-07-13] (Intel Corporation)

R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96064 2012-07-13] (Intel Corporation)

R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [228672 2012-07-13] (Intel Corporation)

R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [361792 2012-07-13] (Intel Corporation)

R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)

R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-30] (Intel Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)

R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)

R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)

R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-04-12] (Bytemobile, Inc.)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-22 20:01 - 2014-02-22 20:01 - 00018842 _____ () C:\Users\Schulle\Desktop\FRST.txt

2014-02-22 20:01 - 2014-02-22 20:01 - 00000000 ____D () C:\Users\Schulle\Desktop\FRST-OlderVersion

2014-02-22 19:58 - 2014-02-22 19:58 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Schulle\Desktop\sc-cleaner.exe

2014-02-22 19:58 - 2014-02-22 19:58 - 00001758 _____ () C:\sc-cleaner.txt

2014-02-22 19:48 - 2014-02-22 19:48 - 00000692 _____ () C:\Users\Schulle\Desktop\JRT.txt

2014-02-22 19:37 - 2014-02-22 19:37 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-02-22 19:33 - 2014-02-22 19:33 - 01037734 _____ (Thisisu) C:\Users\Schulle\Desktop\JRT_6.1.2.exe

2014-02-22 19:23 - 2014-02-22 19:27 - 00000000 ____D () C:\AdwCleaner

2014-02-22 19:22 - 2014-02-22 19:22 - 00000000 ____D () C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14

2014-02-22 19:18 - 2014-02-22 19:18 - 00657600 _____ (Conduit) C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14.exe

2014-02-22 18:51 - 2014-02-22 18:51 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Mozilla

2014-02-22 09:52 - 2014-02-22 18:26 - 00000000 ___RD () C:\Users\Schulle\Dropbox

2014-02-21 22:29 - 2014-02-22 20:01 - 02154496 _____ (Farbar) C:\Users\Schulle\Desktop\FRST64.exe

2014-02-21 22:17 - 2014-02-22 20:01 - 00000000 ____D () C:\FRST

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 11:58 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll

2014-02-16 09:24 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys

2014-02-16 09:24 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll

2014-02-16 08:51 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2014-02-16 08:51 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2014-02-16 08:51 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys

2014-02-16 08:51 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll

2014-02-16 08:51 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll

2014-02-16 08:51 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2014-02-16 08:51 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-02-16 08:51 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2014-02-16 08:51 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-02-16 08:51 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2014-02-16 08:51 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2014-02-16 08:51 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-02-16 08:51 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-02-16 08:51 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2014-02-16 08:51 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-02-16 08:51 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-02-16 08:51 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll

2014-02-16 08:51 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-02-16 08:51 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys

2014-02-16 08:51 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2014-02-16 08:51 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-02-16 08:51 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-02-16 08:51 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-02-16 08:51 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll

2014-02-16 08:51 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-02-16 08:51 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2014-02-16 08:51 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-02-16 08:51 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-02-16 08:51 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-02-16 08:51 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 19:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-15 19:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-15 19:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-15 19:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-15 19:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-15 19:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-15 19:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-15 19:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-15 19:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-15 19:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-15 19:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-15 19:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-15 19:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-15 19:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-15 19:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-15 19:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-15 19:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-15 19:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-15 19:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-15 19:58 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2014-02-15 19:58 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2014-02-15 19:58 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-02-15 19:58 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-02-15 19:58 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2014-02-15 19:58 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2014-02-15 19:56 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe

2014-02-15 19:56 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe

2014-02-15 19:56 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-02-15 19:56 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-02-15 19:56 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-02-15 19:56 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-02-15 19:56 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-02-15 19:56 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-02-15 19:56 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-02-15 19:56 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-02-15 19:56 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-02-15 19:55 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-02-15 19:55 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-02-15 19:55 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-02-08 09:42 - 2014-02-16 09:25 - 00000078 _____ () C:\WINDOWS\setupact.log

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:25 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll

2014-02-02 10:25 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe

2014-02-02 10:25 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-02-02 10:25 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-02-02 10:24 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-02-02 10:16 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00593000 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00246804 _____ () C:\WINDOWS\system32\Drivers\AtherosBT.bin

2014-01-28 15:32 - 2014-01-28 15:32 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00048660 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00048148 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046972 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046268 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046212 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00037796 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001926 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001922 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001802 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001796 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001242 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001228 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001214 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001198 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001192 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000296 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000278 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu
 

==================== One Month Modified Files and Folders =======
 

2014-02-22 20:01 - 2014-02-22 20:01 - 00018842 _____ () C:\Users\Schulle\Desktop\FRST.txt

2014-02-22 20:01 - 2014-02-22 20:01 - 00000000 ____D () C:\Users\Schulle\Desktop\FRST-OlderVersion

2014-02-22 20:01 - 2014-02-21 22:29 - 02154496 _____ (Farbar) C:\Users\Schulle\Desktop\FRST64.exe

2014-02-22 20:01 - 2014-02-21 22:17 - 00000000 ____D () C:\FRST

2014-02-22 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-02-22 19:58 - 2014-02-22 19:58 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Schulle\Desktop\sc-cleaner.exe

2014-02-22 19:58 - 2014-02-22 19:58 - 00001758 _____ () C:\sc-cleaner.txt

2014-02-22 19:57 - 2013-03-20 12:47 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-22 19:56 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-02-22 19:56 - 2013-09-30 04:56 - 00773008 _____ () C:\WINDOWS\system32\perfh007.dat

2014-02-22 19:56 - 2013-09-30 04:56 - 00162310 _____ () C:\WINDOWS\system32\perfc007.dat

2014-02-22 19:52 - 2013-10-23 09:21 - 00000000 __RDO () C:\Users\Schulle\SkyDrive

2014-02-22 19:52 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-02-22 19:52 - 2013-03-20 12:42 - 00000401 _____ () C:\Users\Schulle\AppData\Roaming\sp_data.sys

2014-02-22 19:51 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-02-22 19:48 - 2014-02-22 19:48 - 00000692 _____ () C:\Users\Schulle\Desktop\JRT.txt

2014-02-22 19:37 - 2014-02-22 19:37 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-02-22 19:33 - 2014-02-22 19:33 - 01037734 _____ (Thisisu) C:\Users\Schulle\Desktop\JRT_6.1.2.exe

2014-02-22 19:27 - 2014-02-22 19:23 - 00000000 ____D () C:\AdwCleaner

2014-02-22 19:27 - 2013-10-23 09:18 - 00001013 _____ () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-22 19:22 - 2014-02-22 19:22 - 00000000 ____D () C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14

2014-02-22 19:20 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-02-22 19:19 - 2013-09-29 20:04 - 00042162 _____ () C:\WINDOWS\PFRO.log

2014-02-22 19:18 - 2014-02-22 19:18 - 00657600 _____ (Conduit) C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14.exe

2014-02-22 19:08 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS

2014-02-22 18:51 - 2014-02-22 18:51 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Mozilla

2014-02-22 18:46 - 2013-10-23 08:23 - 01057665 _____ () C:\WINDOWS\WindowsUpdate.log

2014-02-22 18:31 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-02-22 18:29 - 2013-10-23 09:22 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A731646C-D75B-4CAE-840A-BB0008317A5A}

2014-02-22 18:29 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-02-22 18:26 - 2014-02-22 09:52 - 00000000 ___RD () C:\Users\Schulle\Dropbox

2014-02-22 09:52 - 2013-10-23 08:28 - 00000000 ____D () C:\Users\Schulle

2014-02-22 08:16 - 2013-03-22 10:54 - 00000000 ____D () C:\Users\Schulle\Documents\Outlook-Dateien

2014-02-22 08:15 - 2013-04-19 07:12 - 00000000 ____D () C:\Users\Schulle\AppData\Local\C7412C68-0DE5-4B87-9342-8292F8C1135D.aplzod

2014-02-21 22:24 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2014-02-21 22:24 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-02-20 19:25 - 2013-03-23 18:23 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-02-20 19:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-02-20 18:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-16 16:43 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-02-16 16:42 - 2013-08-22 15:44 - 00473776 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-02-16 16:40 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-02-16 13:57 - 2013-03-22 07:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-02-16 13:53 - 2012-07-26 06:26 - 00000199 _____ () C:\WINDOWS\win.ini

2014-02-16 13:51 - 2013-08-15 06:18 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-02-16 13:50 - 2013-03-22 06:54 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-02-16 09:27 - 2013-10-22 08:50 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-16 09:25 - 2014-02-08 09:42 - 00000078 _____ () C:\WINDOWS\setupact.log

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 10:13 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports

2014-02-08 10:16 - 2013-03-20 12:39 - 00000000 ____D () C:\Users\Schulle\AppData\Local\Packages

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-06 13:16 - 2014-02-15 19:58 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-15 19:58 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-15 19:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-15 19:58 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-15 19:58 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-15 19:58 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-15 19:58 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-06 11:49 - 2014-02-15 19:58 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-15 19:58 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-15 19:58 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-15 19:58 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-15 19:58 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-15 19:58 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-06 11:11 - 2014-02-15 19:58 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-15 19:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-15 19:58 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-15 19:58 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-06 10:47 - 2014-02-15 19:58 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-15 19:58 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-15 19:58 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-06 10:22 - 2014-02-15 19:58 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-15 19:58 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-15 19:58 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-15 19:58 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-15 19:58 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-15 19:58 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-15 19:58 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-15 19:58 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-15 19:58 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:53 - 2012-10-24 23:16 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite

2014-02-02 10:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-01-28 15:32 - 2014-01-28 15:32 - 00593000 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys

2014-01-28 15:32 - 2014-01-28 15:32 - 00246804 _____ () C:\WINDOWS\system32\Drivers\AtherosBT.bin

2014-01-28 15:32 - 2014-01-28 15:32 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll

2014-01-28 15:32 - 2014-01-28 15:32 - 00048660 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00048148 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046972 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046268 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00046212 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00037796 _____ () C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001926 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001922 _____ () C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001802 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001796 _____ () C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001242 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001228 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001214 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001204 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001198 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00001192 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000296 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000278 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu

2014-01-28 15:32 - 2014-01-28 15:32 - 00000264 _____ () C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu

2014-01-27 08:43 - 2012-06-22 07:40 - 00070592 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\cfwids.sys

2014-01-27 08:37 - 2012-08-17 01:53 - 00185792 _____ (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe

2014-01-27 08:37 - 2012-06-22 07:38 - 00344688 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfewfpk.sys

2014-01-27 08:33 - 2012-06-22 07:36 - 00783864 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfehidk.sys

2014-01-27 08:31 - 2012-06-22 07:35 - 00520696 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfefirek.sys

2014-01-27 08:30 - 2012-06-22 07:34 - 00311600 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeavfk.sys

2014-01-27 08:29 - 2012-06-22 07:34 - 00180272 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeapfk.sys

2014-01-27 08:15 - 2012-06-18 12:29 - 00069352 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeelamk.sys
 

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe
 
 

Some content of TEMP:

====================

C:\Users\Schulle\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps2qhkv.dll

C:\Users\Schulle\AppData\Local\Temp\IEHistory.exe

C:\Users\Schulle\AppData\Local\Temp\InstalledPrograms.exe

C:\Users\Schulle\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-20 18:31
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

sind damit die Geister verschwunden ???

Noch Kontrollscans :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

[CODE Results of screen317's Security Check version 0.99.79
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
McAfee Anti-Virus und Anti-Spyware
Windows Defender
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
Malwarebytes Anti-Malware Version 1.75.0.1300
Adobe Reader 10.1.8 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Spybot Teatimer.exe is disabled!
Internet Manager OnlineUpdate ouc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
][/CODE]

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2014 02

Ran by Schulle (administrator) on SCHULLE1 on 04-03-2014 19:44:11

Running from C:\Users\Schulle\Desktop

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\WINDOWS\system32\DptfParticipantProcessorService.exe

(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe

() C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe

(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe

() C:\ProgramData\DatacardService\HWDeviceService64.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe

(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(McAfee, Inc.) C:\windows\system32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe

(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(Microsoft Corporation) C:\Windows\System32\skydrive.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Safer-Networking Ltd.) D:\Sicher\Spybot - Search & Destroy 2\SDTray.exe

(Apple Inc.) D:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe

(Apple Inc.) D:\Program Files (x86)\iTunes\iTunesHelper.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [DptfPolicyLpmServiceHelper] - C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)

HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-31] ()

HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-09-19] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [SDTray] - d:\Sicher\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [iTunesHelper] - D:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [SkyDrive] - C:\Users\Schulle\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [iCloudServices] - D:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [ApplePhotoStreams] - D:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-3720380160-3617291145-2319489507-1002\...\Run: [Spybot-S&D Cleaning] - D:\Sicher\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs:  ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

AppInit_DLLs-x32: , C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)

Startup: C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - d:\Sicher\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
 

==================== Services (Whitelisted) =================
 

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-08-31] (Qualcomm Atheros Commnucations)

R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [29056 2012-07-30] ()

R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [30592 2012-07-30] ()

R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2013-04-12] ()

R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-30] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)

S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)

R2 mfevtp; C:\windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-31] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-04-12] (Bytemobile, Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-31] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)

R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107328 2012-07-13] (Intel Corporation)

R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [42816 2012-07-13] (Intel Corporation)

R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [64832 2012-07-13] (Intel Corporation)

R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [96064 2012-07-13] (Intel Corporation)

R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [228672 2012-07-13] (Intel Corporation)

R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [361792 2012-07-13] (Intel Corporation)

R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)

R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-30] (Intel Corporation)

R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)

R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)

R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)

R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-04-12] (Bytemobile, Inc.)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-03-04 19:44 - 2014-03-04 19:44 - 00018846 _____ () C:\Users\Schulle\Desktop\FRST.txt

2014-03-04 19:39 - 2014-03-04 19:39 - 00987425 _____ () C:\Users\Schulle\Desktop\SecurityCheck.exe

2014-02-22 20:01 - 2014-03-04 19:44 - 00000000 ____D () C:\Users\Schulle\Desktop\FRST-OlderVersion

2014-02-22 19:58 - 2014-02-22 19:58 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Schulle\Desktop\sc-cleaner.exe

2014-02-22 19:58 - 2014-02-22 19:58 - 00001758 _____ () C:\sc-cleaner.txt

2014-02-22 19:37 - 2014-02-22 19:37 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-02-22 19:33 - 2014-02-22 19:33 - 01037734 _____ (Thisisu) C:\Users\Schulle\Desktop\JRT_6.1.2.exe

2014-02-22 19:23 - 2014-02-22 19:27 - 00000000 ____D () C:\AdwCleaner

2014-02-22 19:22 - 2014-02-22 19:22 - 00000000 ____D () C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14

2014-02-22 19:18 - 2014-02-22 19:18 - 00657600 _____ (Conduit) C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14.exe

2014-02-22 18:51 - 2014-02-22 18:51 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Mozilla

2014-02-22 09:52 - 2014-02-22 18:26 - 00000000 ___RD () C:\Users\Schulle\Dropbox

2014-02-21 22:29 - 2014-03-04 19:44 - 02156544 _____ (Farbar) C:\Users\Schulle\Desktop\FRST64.exe

2014-02-21 22:17 - 2014-03-04 19:44 - 00000000 ____D () C:\FRST

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 11:58 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll

2014-02-16 09:26 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll

2014-02-16 09:25 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll

2014-02-16 09:24 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys

2014-02-16 09:24 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll

2014-02-16 08:51 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2014-02-16 08:51 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2014-02-16 08:51 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-02-16 08:51 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2014-02-16 08:51 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys

2014-02-16 08:51 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll

2014-02-16 08:51 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll

2014-02-16 08:51 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll

2014-02-16 08:51 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2014-02-16 08:51 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-02-16 08:51 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2014-02-16 08:51 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2014-02-16 08:51 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-02-16 08:51 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2014-02-16 08:51 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2014-02-16 08:51 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2014-02-16 08:51 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2014-02-16 08:51 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-02-16 08:51 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-02-16 08:51 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-02-16 08:51 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2014-02-16 08:51 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-02-16 08:51 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-02-16 08:51 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll

2014-02-16 08:51 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-02-16 08:51 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll

2014-02-16 08:51 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys

2014-02-16 08:51 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2014-02-16 08:51 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-02-16 08:51 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2014-02-16 08:51 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2014-02-16 08:51 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-02-16 08:51 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-02-16 08:51 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll

2014-02-16 08:51 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-02-16 08:51 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2014-02-16 08:51 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2014-02-16 08:51 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2014-02-16 08:51 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-02-16 08:51 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-02-16 08:51 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-02-16 08:51 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 19:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-15 19:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-15 19:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-15 19:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-15 19:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-15 19:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-15 19:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-15 19:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-15 19:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-15 19:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-15 19:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-15 19:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-15 19:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-15 19:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-15 19:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-15 19:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-15 19:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-15 19:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-15 19:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-15 19:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-15 19:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-15 19:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-15 19:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-15 19:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-15 19:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-15 19:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-15 19:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-15 19:58 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2014-02-15 19:58 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2014-02-15 19:58 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-02-15 19:58 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll

2014-02-15 19:58 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-02-15 19:58 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2014-02-15 19:58 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2014-02-15 19:56 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe

2014-02-15 19:56 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe

2014-02-15 19:56 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-02-15 19:56 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-02-15 19:56 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-02-15 19:56 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-02-15 19:56 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-02-15 19:56 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-02-15 19:56 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms

2014-02-15 19:56 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-02-15 19:56 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-02-15 19:56 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-02-15 19:56 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-02-15 19:55 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-02-15 19:55 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-02-15 19:55 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-02-15 19:55 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-02-15 19:55 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-02-15 19:55 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-02-08 09:42 - 2014-03-02 17:25 - 00002637 _____ () C:\WINDOWS\setupact.log

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:25 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll

2014-02-02 10:25 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe

2014-02-02 10:25 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll

2014-02-02 10:25 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-02 10:25 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll

2014-02-02 10:25 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-02-02 10:25 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-02-02 10:24 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-02-02 10:16 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
 

==================== One Month Modified Files and Folders =======
 

2014-03-04 19:44 - 2014-03-04 19:44 - 00018846 _____ () C:\Users\Schulle\Desktop\FRST.txt

2014-03-04 19:44 - 2014-02-22 20:01 - 00000000 ____D () C:\Users\Schulle\Desktop\FRST-OlderVersion

2014-03-04 19:44 - 2014-02-21 22:29 - 02156544 _____ (Farbar) C:\Users\Schulle\Desktop\FRST64.exe

2014-03-04 19:44 - 2014-02-21 22:17 - 00000000 ____D () C:\FRST

2014-03-04 19:44 - 2013-03-20 12:47 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-03-04 19:39 - 2014-03-04 19:39 - 00987425 _____ () C:\Users\Schulle\Desktop\SecurityCheck.exe

2014-03-04 19:38 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-03-04 19:38 - 2013-09-30 04:56 - 00773008 _____ () C:\WINDOWS\system32\perfh007.dat

2014-03-04 19:38 - 2013-09-30 04:56 - 00162310 _____ () C:\WINDOWS\system32\perfc007.dat

2014-03-04 19:34 - 2013-10-23 09:21 - 00000000 __RDO () C:\Users\Schulle\SkyDrive

2014-03-04 19:34 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-03-04 19:34 - 2013-03-20 12:42 - 00000401 _____ () C:\Users\Schulle\AppData\Roaming\sp_data.sys

2014-03-04 19:33 - 2013-09-29 20:04 - 00042988 _____ () C:\WINDOWS\PFRO.log

2014-03-04 19:33 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-03-04 19:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-03-04 18:26 - 2013-10-23 08:23 - 02086451 _____ () C:\WINDOWS\WindowsUpdate.log

2014-03-04 18:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-03-04 18:07 - 2013-10-23 09:22 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A731646C-D75B-4CAE-840A-BB0008317A5A}

2014-03-02 21:35 - 2013-03-22 10:54 - 00000000 ____D () C:\Users\Schulle\Documents\Outlook-Dateien

2014-03-02 21:28 - 2013-04-19 07:12 - 00000000 ____D () C:\Users\Schulle\AppData\Local\C7412C68-0DE5-4B87-9342-8292F8C1135D.aplzod

2014-03-02 17:25 - 2014-02-08 09:42 - 00002637 _____ () C:\WINDOWS\setupact.log

2014-03-02 07:45 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-02-22 19:58 - 2014-02-22 19:58 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Schulle\Desktop\sc-cleaner.exe

2014-02-22 19:58 - 2014-02-22 19:58 - 00001758 _____ () C:\sc-cleaner.txt

2014-02-22 19:37 - 2014-02-22 19:37 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-02-22 19:33 - 2014-02-22 19:33 - 01037734 _____ (Thisisu) C:\Users\Schulle\Desktop\JRT_6.1.2.exe

2014-02-22 19:27 - 2014-02-22 19:23 - 00000000 ____D () C:\AdwCleaner

2014-02-22 19:27 - 2013-10-23 09:18 - 00001013 _____ () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-22 19:22 - 2014-02-22 19:22 - 00000000 ____D () C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14

2014-02-22 19:20 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-02-22 19:18 - 2014-02-22 19:18 - 00657600 _____ (Conduit) C:\Users\Schulle\Desktop\AdwCleaner_TSV44ZF14.exe

2014-02-22 19:08 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS

2014-02-22 18:51 - 2014-02-22 18:51 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Mozilla

2014-02-22 18:29 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-02-22 18:26 - 2014-02-22 09:52 - 00000000 ___RD () C:\Users\Schulle\Dropbox

2014-02-22 09:52 - 2013-10-23 08:28 - 00000000 ____D () C:\Users\Schulle

2014-02-21 22:24 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files\Common Files\mcafee

2014-02-21 22:24 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-02-20 19:25 - 2013-03-23 18:23 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-02-20 19:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-02-20 11:59 - 2014-02-20 11:59 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00001087 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-20 11:58 - 2014-02-20 11:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-20 08:29 - 2014-02-20 08:29 - 00003100 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3720380160-3617291145-2319489507-1002

2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-16 16:43 - 2013-03-20 12:41 - 00000000 ___RD () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-02-16 16:42 - 2013-08-22 15:44 - 00473776 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-02-16 16:40 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism

2014-02-16 16:40 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-02-16 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-02-16 13:57 - 2013-03-22 07:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-02-16 13:53 - 2012-07-26 06:26 - 00000199 _____ () C:\WINDOWS\win.ini

2014-02-16 13:51 - 2013-08-15 06:18 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-02-16 13:50 - 2013-03-22 06:54 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-02-16 09:27 - 2013-10-22 08:50 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA

2014-02-16 09:26 - 2014-02-16 09:26 - 00000000 ____D () C:\Users\Schulle\AppData\Local\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-02-16 09:26 - 2013-10-23 08:23 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-02-16 09:25 - 2013-10-23 08:23 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-02-15 20:09 - 2014-02-15 20:09 - 00000000 ____D () C:\Users\Schulle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-02-15 10:13 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports

2014-02-08 10:16 - 2013-03-20 12:39 - 00000000 ____D () C:\Users\Schulle\AppData\Local\Packages

2014-02-08 09:42 - 2014-02-08 09:42 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-02-06 13:16 - 2014-02-15 19:58 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-15 19:58 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-15 19:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-15 19:58 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-15 19:58 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-15 19:58 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-15 19:58 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-06 11:49 - 2014-02-15 19:58 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-15 19:58 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-15 19:58 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-15 19:58 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-15 19:58 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-15 19:58 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-15 19:58 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-06 11:11 - 2014-02-15 19:58 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-15 19:58 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-15 19:58 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-15 19:58 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-15 19:58 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-15 19:58 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-06 10:47 - 2014-02-15 19:58 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-15 19:58 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-15 19:58 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-15 19:58 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-06 10:22 - 2014-02-15 19:58 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-15 19:58 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-15 19:58 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-15 19:58 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-15 19:58 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-15 19:58 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-15 19:58 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-15 19:58 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-15 19:58 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV

2014-02-02 11:25 - 2014-02-02 11:25 - 00000000 ____D () C:\WINDOWS\system32\NV

2014-02-02 11:23 - 2014-02-02 11:23 - 00005891 _____ () C:\WINDOWS\wininit.ini

2014-02-02 10:53 - 2014-02-02 10:53 - 00000000 ____D () C:\Program Files\Common Files\Atheros

2014-02-02 10:53 - 2012-10-24 23:16 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite

2014-02-02 10:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
 

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe
 
 

Some content of TEMP:

====================

C:\Users\Schulle\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps2qhkv.dll

C:\Users\Schulle\AppData\Local\Temp\IEHistory.exe

C:\Users\Schulle\AppData\Local\Temp\InstalledPrograms.exe

C:\Users\Schulle\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-23 10:26
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Dank Ihrer Hilfe alles erledigt???
Keine Probleme vorhanden, kann ich die Hilfsprogramme wieder deinstallieren ?

ESET Onlinescanner? :)

Den Eset Onlinescanner habe ich wie beschrieben laufen lassen und Logfile eigentlich auch gepostet wo das Teil geblieben ist keine Ahnung, soll ich diesen Schritt nochmal ausführen ?

Poste einfach nochmal das Logfile :)