Sicherheitswarung Abuse Team

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-09-2013 03
Ran by mikelsoft (administrator) on LAPTOP on 15-09-2013 12:26:00
Running from C:\my download
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg32.exe
(Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaRegistry.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Screen Reading Optimizer\SRORest.exe
(Conexant Systems, Inc.) C:\Windows\system32\SAsrv.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Acronis) C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
() C:\Program Files\Lenovo\System Update\UNCServer.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Screen Reading Optimizer\SROSVC.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Acronis) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49568 2010-10-26] ()
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [995184 2013-07-18] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2379504 2013-04-24] (Synaptics Incorporated)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [677632 2013-07-05] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ContinueAfterReboot] - C:\Program Files\Lenovo\System Update\Tvsu.exe [1457000 2013-06-26] ()
HKLM\...\Run: [TrueImageMonitor.exe] - C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)
HKLM\...\Run: [AcronisTibMounterMonitor] - C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [413464 2013-02-15] (Acronis)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
MountPoints2: {42c800bd-941a-11e2-9bfe-60d819aa467d} - E:\AutoRun.exe
MountPoints2: {7fa6d134-930e-11e2-8b06-60d819aa467d} - E:\AutoRun.exe
MountPoints2: {8b09228a-b49e-11e2-8ce8-60d819aa467d} - E:\AutoRun.exe
MountPoints2: {8b092295-b49e-11e2-8ce8-60d819aa467d} - E:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\mikelsoft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * OODBS

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~3\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default
FF user.js: detected! => C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\searchplugins\delta.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ant Video Downloader - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\anttoolbar@ant.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\ich@maltegoetz.de
FF Extension: Forecastfox - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF Extension: Flagfox - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF Extension: Просмотр HTTP заголовков - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: WOT - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: DownloadHelper - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Easy YouTube Video Downloader - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
FF Extension: No Name - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.xpi
FF Extension: No Name - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: No Name - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\mikelsoft\AppData\Roaming\Mozilla\Firefox\Profiles\jda0g5q7.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Extension: (Google Docs) - C:\Users\MIKELS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\MIKELS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\MIKELS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\MIKELS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\MIKELS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [831360 2013-02-15] (Acronis)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3816440 2013-08-31] (Acronis)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-07-05] (Advanced Micro Devices, Inc.)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg32.exe [190592 2010-12-17] (Conexant Systems Inc.)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1816064 2012-07-13] (Realsil Microelectronics Inc.)
R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [127072 2012-08-24] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2013-07-18] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-07-18] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [29920 2013-01-08] (The OpenVPN Project)
R2 RalinkRegistryWriter; C:\Program Files\Ralink\Common\RaRegistry.exe [372736 2012-01-13] (Ralink Technology, Corp.)
S2 RaMediaServer; C:\Program Files\Ralink\Common\RaMediaServer.exe [625728 2013-01-21] ()
R2 SAService; C:\Windows\system32\SAsrv.exe [447104 2011-09-01] (Conexant Systems, Inc.)
R2 SROSVC; C:\Program Files\Lenovo\Screen Reading Optimizer\SROSVC.exe [446800 2012-03-05] (Lenovo Group Limited)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R2 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7094592 2013-03-20] (Acronis)
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [116368 2012-12-18] (Lenovo Group Limited)
R2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [3602312 2012-10-02] (RealVNC Ltd)
S4 HiSuiteOuc.exe; "C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe" -/service [x]
S4 HuaweiHiSuiteService.exe; "C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe" -/service [x]
S4 HWDeviceService.exe; "C:\ProgramData\DatacardService\HWDeviceService.exe" -/service [x]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [x]

==================== Drivers (Whitelisted) ====================

R0 amd_sata; C:\Windows\System32\DRIVERS\amd_sata.sys [70824 2012-10-11] (Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\DRIVERS\amd_xata.sys [34984 2012-10-11] (Advanced Micro Devices)
R3 btwampfl; C:\Windows\system32\drivers\btwampfl.sys [504360 2012-04-01] (Broadcom Corporation.)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-06-03] (DT Soft Ltd)
S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [195200 2011-10-24] (Huawei Technologies Co., Ltd.)
R3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [77528 2013-09-15] (MalwareBytes)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [105176 2013-09-15] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [1317952 2012-04-17] (Ralink Technology Corp.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15576 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10200 2013-07-01] ()
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254608 2012-07-04] (Realtek Semiconductor Corp.)
R3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtl8192Ce.sys [760936 2012-03-09] (Realtek Semiconductor Corporation                           )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2013-02-20] (Duplex Secure Ltd.)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2012-07-20] (The OpenVPN Project)
S3 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [888640 2013-08-31] (Acronis International GmbH)
R3 teamviewervpn; C:\Windows\System32\DRIVERS\teamviewervpn.sys [25088 2012-11-28] (TeamViewer GmbH)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [736192 2013-08-31] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [130488 2013-08-31] (Acronis)
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [28416 2011-08-18] (usb camera)
R0 vididr; C:\Windows\System32\DRIVERS\vididr.sys [116000 2013-08-31] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [85280 2013-08-31] (Acronis International GmbH)
R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2012-05-29] (RealVNC Ltd.)
U3 a8pnb4qt; C:\Windows\System32\Drivers\a8pnb4qt.sys [0 ] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_cdcecm; system32\DRIVERS\ew_jucdcecm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-15 12:25 - 2013-09-15 12:25 - 00000000 ____D C:\FRST
2013-09-15 12:09 - 2013-09-15 12:09 - 00000000 ____D C:\ProgramData\Oracle
2013-09-15 06:56 - 2013-09-15 06:56 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-09-15 06:56 - 2013-09-15 06:56 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-15 06:50 - 2013-09-15 06:50 - 00105176 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-09-15 06:49 - 2013-09-15 06:49 - 00077528 _____ (MalwareBytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-09-15 06:42 - 2013-09-15 06:42 - 00005942 _____ C:\Windows\PFRO.log
2013-09-15 06:13 - 2013-09-15 06:13 - 00001031 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-15 06:12 - 2013-09-15 06:13 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-15 06:12 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-14 16:38 - 2013-09-15 06:49 - 00000000 ____D C:\Users\mikelsoft\Desktop\mbar
2013-09-05 22:06 - 2013-09-05 22:06 - 00000000 ____D C:\Users\mikelsoft\Documents\Arduino
2013-09-05 22:06 - 2013-09-05 22:06 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Arduino15
2013-09-05 22:05 - 2013-09-05 22:05 - 00000913 _____ C:\Users\Public\Desktop\Arduino.lnk
2013-09-05 22:03 - 2013-09-05 22:05 - 00012096 _____ C:\Windows\DPINST.LOG
2013-09-05 21:58 - 2013-09-05 22:03 - 00000000 ____D C:\Program Files\Arduino
2013-09-01 12:47 - 2013-09-01 12:47 - 00000000 ____D C:\Users\mikelsoft\AppData\Local\calibre-cache
2013-08-31 02:03 - 2013-08-31 02:03 - 00000000 _RSHD C:\acroldr
2013-08-31 01:55 - 2013-08-31 01:55 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Acronis
2013-08-31 01:45 - 2013-08-31 01:45 - 00888640 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys
2013-08-31 01:45 - 2013-08-31 01:45 - 00234752 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-08-31 01:44 - 2013-08-31 01:46 - 00000000 ____D C:\ProgramData\Acronis
2013-08-31 01:44 - 2013-08-31 01:44 - 00736192 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00158496 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00130488 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00116000 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00085280 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00081184 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00001123 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-08-31 01:43 - 2013-08-31 01:45 - 00000000 ____D C:\Program Files\Common Files\Acronis
2013-08-31 01:43 - 2013-08-31 01:43 - 00000000 ____D C:\Program Files\Acronis
2013-08-29 05:52 - 2013-09-15 06:43 - 00003444 _____ C:\Windows\setupact.log
2013-08-29 05:52 - 2013-08-29 05:52 - 00000000 _____ C:\Windows\setuperr.log
2013-08-27 01:14 - 2013-08-27 01:14 - 00000000 ____D C:\Users\mikelsoft\Documents\LG Cloud Sync
2013-08-27 01:08 - 2013-08-27 01:22 - 00000000 ____D C:\Users\mikelsoft\AppData\Local\LG Cloud
2013-08-27 01:08 - 2013-08-27 01:08 - 00000922 _____ C:\Users\Public\Desktop\LG Cloud.lnk
2013-08-27 01:08 - 2013-08-27 01:08 - 00000000 ____D C:\Program Files\LG Cloud
2013-08-26 00:08 - 2013-08-26 00:08 - 00000000 ____D C:\Windows\system32\oodag
2013-08-25 19:34 - 2013-08-25 19:35 - 00000000 ____D C:\Users\mikelsoft\Desktop\Adobe Photoshop CS6 Extended Portable
2013-08-20 06:34 - 2013-07-01 10:25 - 02939072 _____ C:\Windows\system32\pwNative.exe
2013-08-20 06:33 - 2013-08-20 06:33 - 00001157 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-08-20 06:33 - 2013-08-20 06:33 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Home Edition 8.0
2013-08-20 06:33 - 2013-07-01 10:25 - 00015576 ____N C:\Windows\system32\pwdrvio.sys
2013-08-20 06:33 - 2013-07-01 10:25 - 00010200 ____N C:\Windows\system32\pwdspio.sys
2013-08-20 05:59 - 2013-08-23 19:59 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2013-08-17 11:18 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-17 11:18 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-17 11:18 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-17 11:18 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-17 11:18 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-17 11:18 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-17 11:17 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-17 11:17 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-17 11:17 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-17 11:17 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-17 11:17 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-17 11:17 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-17 11:17 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-17 11:17 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-17 11:17 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-17 11:17 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-17 01:18 - 2013-08-17 01:20 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-09-15 12:25 - 2013-09-15 12:25 - 00000000 ____D C:\FRST
2013-09-15 12:25 - 2013-02-20 20:45 - 00000000 ____D C:\my download
2013-09-15 12:21 - 2013-02-20 20:04 - 01914689 _____ C:\Windows\WindowsUpdate.log
2013-09-15 12:18 - 2013-02-20 21:04 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-15 12:13 - 2013-02-21 18:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-15 12:10 - 2013-02-20 21:04 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-15 12:09 - 2013-09-15 12:09 - 00000000 ____D C:\ProgramData\Oracle
2013-09-15 06:56 - 2013-09-15 06:56 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-15 06:56 - 2013-09-15 06:56 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-09-15 06:56 - 2013-09-15 06:56 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-15 06:56 - 2013-02-21 17:08 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-15 06:56 - 2013-02-21 17:08 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-15 06:53 - 2013-05-27 11:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-09-15 06:52 - 2009-07-14 06:34 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-15 06:52 - 2009-07-14 06:34 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-15 06:50 - 2013-09-15 06:50 - 00105176 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-09-15 06:49 - 2013-09-15 06:49 - 00077528 _____ (MalwareBytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-09-15 06:49 - 2013-09-14 16:38 - 00000000 ____D C:\Users\mikelsoft\Desktop\mbar
2013-09-15 06:46 - 2013-03-13 13:35 - 00000000 ___RD C:\Users\mikelsoft\Dropbox
2013-09-15 06:46 - 2013-03-13 13:22 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Dropbox
2013-09-15 06:43 - 2013-08-29 05:52 - 00003444 _____ C:\Windows\setupact.log
2013-09-15 06:43 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-15 06:42 - 2013-09-15 06:42 - 00005942 _____ C:\Windows\PFRO.log
2013-09-15 06:17 - 2013-02-20 21:01 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Skype
2013-09-15 06:13 - 2013-09-15 06:13 - 00001031 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-15 06:13 - 2013-09-15 06:12 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-13 21:35 - 2013-02-21 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-13 21:35 - 2013-02-21 18:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-06 21:06 - 2013-02-20 21:08 - 00002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-05 22:06 - 2013-09-05 22:06 - 00000000 ____D C:\Users\mikelsoft\Documents\Arduino
2013-09-05 22:06 - 2013-09-05 22:06 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Arduino15
2013-09-05 22:05 - 2013-09-05 22:05 - 00000913 _____ C:\Users\Public\Desktop\Arduino.lnk
2013-09-05 22:05 - 2013-09-05 22:03 - 00012096 _____ C:\Windows\DPINST.LOG
2013-09-05 22:03 - 2013-09-05 21:58 - 00000000 ____D C:\Program Files\Arduino
2013-09-03 20:07 - 2010-11-20 23:01 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-01 14:32 - 2013-04-14 12:06 - 00000600 _____ C:\Users\mikelsoft\AppData\Roaming\winscp.rnd
2013-09-01 14:13 - 2013-02-20 21:11 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\XBMC
2013-09-01 13:42 - 2012-05-05 09:54 - 00000000 ____D C:\Users\mikelsoft\Documents\Calibre Library
2013-09-01 12:47 - 2013-09-01 12:47 - 00000000 ____D C:\Users\mikelsoft\AppData\Local\calibre-cache
2013-09-01 12:46 - 2013-02-20 20:45 - 00000890 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2013-09-01 12:46 - 2013-02-20 20:45 - 00000000 ____D C:\Program Files\Calibre2
2013-09-01 12:37 - 2013-02-20 21:05 - 00000000 ____D C:\Program Files\XBMC
2013-08-31 02:03 - 2013-08-31 02:03 - 00000000 _RSHD C:\acroldr
2013-08-31 01:55 - 2013-08-31 01:55 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Acronis
2013-08-31 01:47 - 2009-07-14 04:04 - 00000860 _____ C:\Windows\system32\Drivers\etc\HOSTS.MVP
2013-08-31 01:46 - 2013-08-31 01:44 - 00000000 ____D C:\ProgramData\Acronis
2013-08-31 01:45 - 2013-08-31 01:45 - 00888640 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys
2013-08-31 01:45 - 2013-08-31 01:45 - 00234752 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-08-31 01:45 - 2013-08-31 01:43 - 00000000 ____D C:\Program Files\Common Files\Acronis
2013-08-31 01:44 - 2013-08-31 01:44 - 00736192 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00158496 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00130488 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00116000 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00085280 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00081184 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2013-08-31 01:44 - 2013-08-31 01:44 - 00001123 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-08-31 01:43 - 2013-08-31 01:43 - 00000000 ____D C:\Program Files\Acronis
2013-08-29 05:52 - 2013-08-29 05:52 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 15:04 - 2013-02-20 23:11 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Media Player Classic
2013-08-28 15:04 - 2013-02-20 21:36 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\DAEMON Tools Lite
2013-08-28 15:03 - 2013-03-24 02:33 - 00000000 ____D C:\Windows\Minidump
2013-08-28 15:03 - 2013-02-20 19:59 - 00000000 ____D C:\Windows\Panther
2013-08-28 13:16 - 2013-04-03 14:09 - 00000000 ____D C:\Program Files\Recuva
2013-08-28 13:15 - 2013-02-20 20:50 - 00000929 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-28 13:15 - 2013-02-20 20:50 - 00000000 ____D C:\Program Files\CCleaner
2013-08-27 01:22 - 2013-08-27 01:08 - 00000000 ____D C:\Users\mikelsoft\AppData\Local\LG Cloud
2013-08-27 01:14 - 2013-08-27 01:14 - 00000000 ____D C:\Users\mikelsoft\Documents\LG Cloud Sync
2013-08-27 01:08 - 2013-08-27 01:08 - 00000922 _____ C:\Users\Public\Desktop\LG Cloud.lnk
2013-08-27 01:08 - 2013-08-27 01:08 - 00000000 ____D C:\Program Files\LG Cloud
2013-08-26 11:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-26 11:39 - 2013-02-20 20:55 - 00000000 ____D C:\SysinternalsSuite
2013-08-26 00:08 - 2013-08-26 00:08 - 00000000 ____D C:\Windows\system32\oodag
2013-08-25 19:35 - 2013-08-25 19:34 - 00000000 ____D C:\Users\mikelsoft\Desktop\Adobe Photoshop CS6 Extended Portable
2013-08-25 19:29 - 2013-02-20 20:11 - 00000000 ____D C:\download
2013-08-25 19:13 - 2013-05-17 22:37 - 00000600 _____ C:\Users\mikelsoft\AppData\Local\PUTTY.RND
2013-08-23 20:42 - 2013-03-13 13:24 - 00001027 _____ C:\Users\mikelsoft\Desktop\Dropbox.lnk
2013-08-23 20:42 - 2013-03-13 13:24 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-23 20:38 - 2013-02-20 20:09 - 00000000 ____D C:\Users\mikelsoft
2013-08-23 19:59 - 2013-08-20 05:59 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2013-08-23 19:59 - 2013-02-21 18:14 - 00000000 ____D C:\Windows\system32\Macromed
2013-08-23 19:59 - 2013-02-20 21:34 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-08-23 19:59 - 2013-02-20 21:06 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2013-08-23 19:59 - 2013-02-20 20:56 - 00000000 ____D C:\Users\mikelsoft\AppData\Roaming\TeraCopy
2013-08-23 19:59 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-23 19:59 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-23 19:59 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-08-20 15:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-20 06:33 - 2013-08-20 06:33 - 00001157 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-08-20 06:33 - 2013-08-20 06:33 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Home Edition 8.0
2013-08-17 13:26 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-17 12:04 - 2013-02-20 20:49 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-17 12:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-17 11:38 - 2013-02-21 19:37 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-17 11:38 - 2009-07-14 04:04 - 00000478 _____ C:\Windows\win.ini
2013-08-17 11:36 - 2013-07-19 12:27 - 00000000 ____D C:\Windows\system32\MRT
2013-08-17 11:29 - 2013-02-20 23:40 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-17 01:20 - 2013-08-17 01:18 - 00000000 ____D C:\Program Files\Mozilla Firefox

Some content of TEMP:
====================
C:\Users\mikelsoft\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\mikelsoft\AppData\Local\Temp\Foxit Updater.exe
C:\Users\mikelsoft\AppData\Local\Temp\SHSetup.exe
C:\Users\mikelsoft\AppData\Local\Temp\SkypeSetup.exe
C:\Users\mikelsoft\AppData\Local\Temp\uninst1.exe
C:\Users\mikelsoft\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-14 16:56
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-09-2013 03
Ran by mikelsoft at 2013-09-15 12:27:34
Running from C:\my download
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

7-Zip 9.27 alpha
Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
AIMP3 (Version: v3.50.1224 Beta 1, 31.01.2013)
Amazon.com Kindle Fire
AMD Accelerated Video Transcoding (Version: 13.12.100.30705)
AMD APP SDK Runtime (Version: 10.0.1124.2)
AMD Catalyst Control Center (Version: 2013.0705.1415.23716)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0705.1415.23716)
AMD Media Foundation Decoders (Version: 1.0.80705.1422)
Anzeige am Bildschirm (Version: 6.67.10)
Arduino (Version: 1.5.3)
ASUS Android USB Drivers (Version: 1.0.6351)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.2.43)
Bonjour (Version: 3.0.0.10)
Cain & Abel v4.9.43
calibre (Version: 1.1.0)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center InstallProxy (Version: 2013.0705.1415.23716)
Catalyst Control Center Localization All (Version: 2013.0705.1415.23716)
CCC Help Chinese Standard (Version: 2013.0705.1414.23716)
CCC Help Chinese Traditional (Version: 2013.0705.1414.23716)
CCC Help English (Version: 2013.0705.1414.23716)
CCC Help French (Version: 2013.0705.1414.23716)
CCC Help German (Version: 2013.0705.1414.23716)
CCC Help Italian (Version: 2013.0705.1414.23716)
CCC Help Japanese (Version: 2013.0705.1414.23716)
CCC Help Korean (Version: 2013.0705.1414.23716)
CCC Help Russian (Version: 2013.0705.1414.23716)
CCC Help Spanish (Version: 2013.0705.1414.23716)
ccc-utility (Version: 2013.0705.1415.23716)
CCleaner (Version: 4.05)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Conexant HD Audio (Version: 8.32.34.50)
DAEMON Tools Lite (Version: 4.47.1.0333)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition
Dropbox (HKCU Version: 2.2.13)
DVBViewer Pro (Version: 5.0)
FileZilla Client 3.7.2 (Version: 3.7.2)
Flickr Uploadr 3.2.1
Foxit Reader (Version: 6.0.3.524)
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (Version: 29.0.1547.66)
Google Drive (Version: 1.11.4865.2530)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.153)
Handset WinDriver 1.02.02.00 (Version: 1.02.02.00)
IncrediMail (Version: 6.2.9.5036)
IncrediMail 2.0 (Version: 6.2.9.5036)
IncrediMail Protection Center (Version: 6001076)
IPCamClient (Version: 1.0.0.10)
iSpy (Version: 4.8.4)
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Lenovo Patch Utility (Version: 1.3.1.1)
Lenovo Power Management Driver (Version: 1.67.00.02)
Lenovo Screen Reading Optimizer (Version: 1.16)
Lenovo System Interface Driver (Version: 1.05)
Lenovo System Update (Version: 5.02.0018)
LG Cloud Version 1.003 (Version: 1.003)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MediaInfo 0.7.58 (Version: 0.7.58)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Minimal ADB and Fastboot version 1.1.3 (Version: 1.1.3)
MiniTool Partition Wizard Home Edition 8.0
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MPC-HC 1.6.8 (Version: 1.6.8.7417)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Nmap 6.25
Notepad++ (Version: 6.4.3)
OBD2Spy V2.05
OpenVPN 2.3.0-I001  (Version: 2.3.0-I001)
Oracle VM VirtualBox 4.2.16 (Version: 4.2.16)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Picasa 3 (Version: 3.9)
Protection Center (Version: 6.0.0.1076)
PuTTY version 0.63 (Version: 0.63)
Ralink RT2870 Wireless LAN Card (Version: 1.5.19.0)
Realtek PCIE Card Reader (Version: 6.2.8400.28123)
Recuva (Version: 1.48)
Samsung Kies (Version: 2.5.3.13034_9)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.22.0)
ScanMaster-ELM 2.1.104.771 (Version: 2.1.104.771)
Screenshot Captor 4.00.00
Skype™ 6.6 (Version: 6.6.106)
TAP-Windows 9.9.2 (Version: 9.9.2)
TeamViewer 8 (Version: 8.0.17396)
TeraCopy 2.27
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2700)
ThinkPad UltraNav Driver (Version: 16.2.19.7)
ThinkPad Wireless LAN Adapter Software (Version: 1.00.0031.1)
True Image 2013 (Version: 16.0.6514)
True Image 2013 Plus Pack (Version: 16.0.6514)
UnLock Root 3.1 (Version: 3.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Access 2013 (KB2760350) 32-Bit Edition
Update for Microsoft Excel 2013 (KB2760339) 32-Bit Edition
Update for Microsoft Lync 2013 (KB2817621) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition
Update for Microsoft Office 2013 (KB2727096) 32-Bit Edition
Update for Microsoft Office 2013 (KB2737954) 32-Bit Edition
Update for Microsoft Office 2013 (KB2752025) 32-Bit Edition
Update for Microsoft Office 2013 (KB2752094) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760538) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition
Update for Microsoft Office 2013 (KB2767851) 32-Bit Edition
Update for Microsoft Office 2013 (KB2767860) 32-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition
Update for Microsoft Office 2013 (KB2810010) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817320) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817482) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817489) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817491) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817492) 32-Bit Edition
Update for Microsoft OneNote 2013 (KB2768011) 32-Bit Edition
Update for Microsoft OneNote 2013 (KB2817467) 32-Bit Edition
Update for Microsoft Outlook 2013 (KB2817629) 32-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 32-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2810006) 32-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817622) 32-Bit Edition
Update for Microsoft Visio 2013 (KB2810008) 32-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition
Update for Microsoft Word 2013 (KB2767863) 32-Bit Edition
Update for Microsoft Word 2013 (KB2810086) 32-Bit Edition
VLC media player 2.0.5 (Version: 2.0.5)
VNC Mirror Driver 1.8.0 (Version: 1.8.0)
VNC Printer Driver 1.8.0 (Version: 1.8.0)
VNC Server 5.0.3 (Version: 5.0.3)
VNC Viewer 5.0.3 (Version: 5.0.3)
Win7codecs (Version: 4.0.2)
Windows-Treiberpaket - Amazon.com (WinUSB) KindleFireUsbDeviceClass  (08/20/2012 1.0.0000.00000) (Version: 08/20/2012 1.0.0000.00000)
WinPcap 4.1.2 (Version: 4.1.0.2001)
WinSCP 5.1.5 (Version: 5.1.5)
Wipe 2013.52
WirelessMon V4.0
Wireshark 1.8.4 (32-bit) (Version: 1.8.4)
XBMC

==================== Restore Points  =========================

26-08-2013 10:49:19 Geplanter Prüfpunkt
26-08-2013 20:24:06 Windows Update
30-08-2013 10:27:53 Windows Update
01-09-2013 10:38:12 DirectX wurde installiert
01-09-2013 10:45:06 Installed calibre
03-09-2013 17:56:45 Windows Update
05-09-2013 20:03:20 Gerätetreiber-Paketinstallation: Arduino LLC (www.arduino.cc) Anschlüsse (COM & LPT)
05-09-2013 20:04:13 Gerätetreiber-Paketinstallation: Arduino LLC (www.arduino.cc) Anschlüsse (COM & LPT)
05-09-2013 20:04:47 Gerätetreiber-Paketinstallation: Arduino LLC (www.arduino.cc) Anschlüsse (COM & LPT)
05-09-2013 20:05:12 Gerätetreiber-Paketinstallation: ShumaTech Anschlüsse (COM & LPT)
07-09-2013 19:50:41 Windows Update
11-09-2013 20:35:07 Windows Update
15-09-2013 04:54:18 Installed Java 7 Update 40

==================== Hosts content: ==========================

2009-07-14 04:04 - 2013-08-24 08:38 - 00564665 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1  localhost
127.0.0.1  fr.a2dfp.net
127.0.0.1  m.fr.a2dfp.net
127.0.0.1  ad.a8.net
127.0.0.1  asy.a8ww.net
127.0.0.1  abcstats.com
127.0.0.1  a.abv.bg
127.0.0.1  adserver.abv.bg
127.0.0.1  adv.abv.bg
127.0.0.1  bimg.abv.bg
127.0.0.1  ca.abv.bg
127.0.0.1  www2.a-counter.kiev.ua
127.0.0.1  track.acclaimnetwork.com
127.0.0.1  accuserveadsystem.com
127.0.0.1  www.accuserveadsystem.com
127.0.0.1  achmedia.com
127.0.0.1  csh.actiondesk.com
127.0.0.1  www.activemeter.com #[Tracking.Cookie]
127.0.0.1  ads.activepower.net
127.0.0.1  stat.active24stats.nl #[Tracking.Cookie]
127.0.0.1  cms.ad2click.nl
127.0.0.1  ad2games.com
127.0.0.1  ads.ad2games.com
127.0.0.1  content.ad20.net
127.0.0.1  core.ad20.net
127.0.0.1  banner.ad.nu
127.0.0.1  cl21.v4.adaction.se
127.0.0.1  adadvisor.net
127.0.0.1  tag1.adaptiveads.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {0726C37D-8DC7-407C-B282-3C87CE554D3F} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {0BA69022-F21F-4C01-9553-E995FC637606} - System32\Tasks\Lenovo\SROptimizer => %TRPATH%\SRORest.exe
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {1EB572D6-5E85-4626-B929-FF33F963888F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)
Task: {27F05AB6-56C9-4AEE-BB50-B44B1BFF68E5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {4E69F627-8BFB-40F5-9D4F-2BF3ED76283C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-20] (Google Inc.)
Task: {5C605F60-4D86-4F23-AC92-949185F4711F} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {5FC5024D-2AD4-4EF6-9D41-69DBD790B262} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {7067CAB7-230D-4D9D-9CA5-7DE2D66F83BF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {92DD867D-02B9-4526-9E49-4933B2AE0EE1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {9381D3CA-8383-4587-8554-762A933DD022} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {D1CE46AB-751E-44A7-8AEA-B2BF27D114A7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-20] (Google Inc.)
Task: {D50AD2D6-101E-483B-AB14-833E0599AC20} - System32\Tasks\Launch ASUS Sync Loader => C:\Program Files\ASUS\ASUS Sync\asusUPCTLoader.exe
Task: {FC459E15-DA53-46C4-B1DF-FC56446B7935} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-03-28 00:53 - 2013-03-28 00:53 - 02670136 _____ (Acronis) C:\Program Files\Acronis\TrueImageHome\tishell.dll
2013-04-05 00:12 - 2013-04-05 00:12 - 00130736 _____ (Dropbox, Inc.) C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
2013-03-27 22:36 - 2013-03-27 22:36 - 00021312 _____ () C:\Program Files\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
2013-08-06 19:43 - 2013-08-06 19:43 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-05-21 14:22 - 2013-05-19 11:17 - 00201656 _____ (Martin Prikryl) C:\Program Files\WinSCP\DragExt.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2013-03-28 00:54 - 2013-03-28 00:54 - 00141632 _____ (Acronis) C:\Program Files\Acronis\TrueImageHome\versions_page.dll
2013-02-20 20:56 - 2011-10-26 18:41 - 00305664 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll
2013-03-29 13:38 - 2013-08-13 15:20 - 00340760 _____ (Piriform Ltd) C:\Program Files\Recuva\RecuvaShell.dll
2013-02-20 20:44 - 2013-02-20 20:44 - 00286720 _____ (AIMP DevTeam) C:\Program Files\AIMP3\Modules\aimp_menu32.dll
2013-02-20 20:56 - 2011-10-26 18:41 - 00325120 _____ () C:\Program Files\TeraCopy\TeraCopy.dll
2013-02-20 20:07 - 2013-04-24 01:23 - 00540400 _____ (Synaptics Incorporated) C:\Windows\system32\SynCom.dll
2013-02-20 20:07 - 2013-04-24 01:23 - 00540400 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2013-04-24 01:23 - 2013-04-24 01:23 - 00175856 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2013-03-27 18:53 - 2013-03-27 18:53 - 00121152 _____ (Acronis) C:\Program Files\Acronis\TrueImageHome\afcdpapi.dll
2013-01-23 16:09 - 2013-01-23 16:09 - 00399680 _____ (Acronis) C:\Program Files\Common Files\Acronis\SnapAPI\snapapi.dll
2013-03-28 00:37 - 2013-03-28 00:37 - 13627872 _____ () C:\Program Files\Acronis\TrueImageHome\ti_managers.dll
2013-03-27 21:31 - 2013-03-27 21:31 - 00028480 _____ (Acronis) C:\Program Files\Common Files\Acronis\Home\thread_pool.dll
2013-03-27 21:33 - 2013-03-27 21:33 - 00289088 _____ (Acronis) C:\Program Files\Common Files\Acronis\Home\libssl10.dll
2013-03-27 21:23 - 2013-04-06 01:21 - 01323008 _____ (Acronis) C:\Program Files\Common Files\Acronis\Home\libcrypto10.dll
2013-03-28 00:32 - 2013-03-28 00:32 - 00076096 _____ (Acronis) C:\Program Files\Common Files\Acronis\Home\rpc_client.dll
2013-03-20 19:31 - 2013-03-20 19:31 - 00280896 _____ (Acronis) C:\Program Files\Common Files\Acronis\Home\sync_agent_api.dll
2013-03-14 17:51 - 2013-03-14 17:51 - 03566664 _____ (Acronis International GmbH) C:\Program Files\Common Files\Acronis\TrueImageHome\tdrpapi.dll
2013-01-10 13:31 - 2013-01-10 13:31 - 00342488 _____ (Acronis) C:\Program Files\Common Files\Acronis\TibMounter\tib_mounter.dll
2013-01-10 13:45 - 2013-01-10 13:45 - 01752600 _____ (Acronis) C:\Program Files\Common Files\Acronis\TibMounter\fox.dll
2013-01-10 13:43 - 2013-01-10 13:43 - 00014360 _____ () C:\Program Files\Common Files\Acronis\TibMounter\icudt38.dll
2013-01-10 13:41 - 2013-01-10 13:41 - 00034840 _____ (Acronis) C:\Program Files\Common Files\Acronis\TibMounter\thread_pool.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\mikelsoft\AppData\Roaming\Dropbox\bin\icudt.dll
2013-03-14 10:23 - 2013-03-14 10:23 - 04856384 _____ (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTCommonRes.dll
2013-03-14 10:22 - 2013-03-14 10:22 - 03916352 _____ (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\Engine.dll
2013-02-18 14:58 - 2013-02-18 14:58 - 00393344 _____ (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\imgengine.dll
2013-07-05 14:16 - 2013-07-05 14:16 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-08-17 01:18 - 2013-08-17 01:19 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/15/2013 00:10:43 PM) (Source: Application Hang) (User: )
Description: Programm mbar.exe, Version 1.7.0.1005 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 171c

Startzeit: 01ceb1cefa447599

Endzeit: 10967

Anwendungspfad: C:\Users\mikelsoft\Desktop\mbar\mbar.exe

Berichts-ID: 08e3eb5f-1def-11e3-b105-60d819aa467d

Error: (09/15/2013 06:44:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6068

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6068

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8128

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8128

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/14/2013 03:53:54 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7129

Error: (09/14/2013 03:53:54 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7129


System errors:
=============
Error: (09/15/2013 00:12:42 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{B8C59FFB-27A0-4F91-A994-86D41E166436}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE

Error: (09/15/2013 00:10:43 PM) (Source: mbamchameleon) (User: )
Description: Mbamchameleon Failed to obtain file name information - C00000BE


Microsoft Office Sessions:
=========================
Error: (09/15/2013 00:10:43 PM) (Source: Application Hang)(User: )
Description: mbar.exe1.7.0.1005171c01ceb1cefa44759910967C:\Users\mikelsoft\Desktop\mbar\mbar.exe08e3eb5f-1def-11e3-b105-60d819aa467d

Error: (09/15/2013 06:44:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6068

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6068

Error: (09/14/2013 00:28:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8128

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8128

Error: (09/14/2013 03:53:55 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/14/2013 03:53:54 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7129

Error: (09/14/2013 03:53:54 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7129


==================== Memory info =========================== 

Percentage of memory in use: 48%
Total physical RAM: 3190.67 MB
Available physical RAM: 1649.14 MB
Total Pagefile: 6379.63 MB
Available Pagefile: 4626.04 MB
Total Virtual: 2047.88 MB
Available Virtual: 1885.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:298.09 GB) (Free:228.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================
         

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.14.11

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16660
mikelsoft :: LAPTOP [Administrator]

15.09.2013 06:16:47
MBAM-log-2013-09-15 (06-40-29).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 215755
Laufzeit: 23 Minute(n), 14 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 4
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 5
C:\Users\mikelsoft\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\43619932B8174EB7ACE321F57BF93771 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\E4C82131A5D24C069E3B4D7A56E0F078 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

Infizierte Dateien: 15
C:\Users\mikelsoft\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\E4C82131A5D24C069E3B4D7A56E0F078\DeltaTB.exe (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\UD0yeGTy.exe.part (PUP.Optional.4Squared) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\844C.tmp (PUP.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\CE29765B-BAB0-7891-BB75-E8CC65CA40BD\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\CE29765B-BAB0-7891-BB75-E8CC65CA40BD\Latest\ccp.exe (PUP.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\CE29765B-BAB0-7891-BB75-E8CC65CA40BD\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Local\Temp\CE29765B-BAB0-7891-BB75-E8CC65CA40BD\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\43619932B8174EB7ACE321F57BF93771\speedupmypcDE.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\E4C82131A5D24C069E3B4D7A56E0F078\5472.ico (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\E4C82131A5D24C069E3B4D7A56E0F078\EBB77268-338F-4C6A-8590-AD88FED26F4A (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\mikelsoft\AppData\Roaming\OpenCandy\E4C82131A5D24C069E3B4D7A56E0F078\OCBrowserHelper_1.0.6.125.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

(Ende)