QV06 entfernen

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=8890fe9d1a8b8d4caa74d6d64286e2bf
# engine=15808
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-08 05:15:35
# local_time=2013-11-08 06:15:35 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 97 38132 23960703 66069 0
# compatibility_mode=5893 16776574 100 94 10379249 135562126 0 0
# scanned=214955
# found=0
# cleaned=0
# scan_time=12937
         

UNSUPPORTED OPERATING SYSTEM! ABORTED!
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by MaBruMe (administrator) on MABRUME-PC on 08-11-2013 18:21:58
Running from C:\Users\MaBruMe\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WlanNetService.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Reimage®) C:\Program Files\Reimage\Reimage Repair\ReiGuard.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
MountPoints2: {e3128cbb-6e43-11e2-9ff1-001d7d9d4e74} - F:\pushinst.exe
HKU\UpdatusUser\...\Run: [Duden Korrektor SysTray] - C:\Program Files\Duden\Duden-Rechtschreibprüfung\DKTray.exe [ 2011-07-06] (Expert System S.p.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.201

FireFox:
========
FF ProfilePath: C:\Users\MaBruMe\AppData\Roaming\Mozilla\Firefox\Profiles\9pswlss5.default
FF Homepage: bild.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\MaBruMe\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: firefox - C:\Users\MaBruMe\AppData\Roaming\Mozilla\Firefox\Profiles\9pswlss5.default\Extensions\firefox@batbrowse.com.xpi

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://bild.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll No File
CHR Extension: (Google Docs) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\MaBruMe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 ReimageRealTimeProtection; C:\Program Files\Reimage\Reimage Repair\ReiGuard.exe [3498856 2013-10-09] (Reimage®)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-04] (Avira GmbH)
S3 cpuz134; \??\C:\Users\MaBruMe\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-08 18:21 - 2013-11-08 18:21 - 01089445 _____ (Farbar) C:\Users\MaBruMe\Desktop\FRST.exe
2013-11-08 18:19 - 2013-11-08 18:19 - 00891167 _____ C:\Users\MaBruMe\Desktop\SecurityCheck.exe
2013-11-08 14:40 - 2013-11-08 14:40 - 103148646 _____ C:\Windows\system32\蠭꾖ᨬb
2013-11-08 14:35 - 2013-11-08 14:35 - 00001375 _____ C:\Users\MaBruMe\Desktop\JRT.txt
2013-11-08 14:33 - 2013-11-08 14:33 - 00000000 ____D C:\Windows\ERUNT
2013-11-08 14:32 - 2013-11-08 14:32 - 01034531 _____ (Thisisu) C:\Users\MaBruMe\Desktop\JRT.exe
2013-11-08 14:22 - 2013-11-08 14:22 - 01073262 _____ C:\Users\MaBruMe\Desktop\adwcleaner.exe
2013-11-08 14:06 - 2013-11-08 14:06 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 14:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-08 14:04 - 2013-11-08 14:05 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\MaBruMe\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-08 13:28 - 2013-11-08 14:02 - 00000000 ____D C:\Windows\pss
2013-11-08 08:46 - 2013-11-08 14:06 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-08 08:46 - 2013-11-08 08:46 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Malwarebytes
2013-11-08 08:46 - 2013-11-08 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-08 00:17 - 2013-11-08 00:17 - 00000000 ____D C:\FRST
2013-11-08 00:15 - 2013-11-08 00:15 - 00000000 _____ C:\Users\MaBruMe\defogger_reenable
2013-11-07 23:30 - 2013-11-08 09:15 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Uniblue
2013-11-07 23:30 - 2013-11-08 09:15 - 00000000 ____D C:\Program Files\Uniblue
2013-11-07 22:54 - 2013-11-07 22:54 - 103000967 _____ C:\Windows\system32\聛㵹ᨬb
2013-11-07 16:54 - 2013-11-07 16:54 - 102946670 _____ C:\Windows\system32\䙝蟀ᨬb
2013-11-07 10:38 - 2013-11-07 10:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-06 15:28 - 2013-11-06 15:28 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-11-04 11:20 - 2013-11-04 11:20 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\digital publishing
2013-11-02 20:28 - 2013-11-02 20:28 - 00157928 _____ C:\Windows\Minidump\110213-46550-01.dmp
2013-11-02 18:31 - 2013-11-02 18:31 - 104684788 _____ C:\Windows\system32\䆅䄽ᨬi
2013-11-02 14:54 - 2013-11-02 14:54 - 00155448 _____ C:\Windows\Minidump\110213-16707-01.dmp
2013-10-26 13:13 - 2013-10-26 13:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-10-25 23:55 - 2013-11-08 16:57 - 00005746 _____ C:\Windows\system32\ScanResults.xml
2013-10-25 23:53 - 2013-11-08 16:54 - 00001056 _____ C:\Windows\system32\SettingsFile
2013-10-19 17:35 - 2013-10-19 17:35 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\TeamViewer
2013-10-19 11:49 - 2013-11-08 13:40 - 00000000 ____D C:\Program Files\TeamViewer
2013-10-19 11:49 - 2013-10-19 11:49 - 00001120 _____ C:\Users\MaBruMe\Documents\TeamViewer 8.lnk
2013-10-19 07:59 - 2013-10-19 07:59 - 00152272 _____ C:\Windows\Minidump\101913-17830-01.dmp
2013-10-19 07:52 - 2013-10-19 07:52 - 101890677 _____ C:\Windows\system32\쮏둇ᨬZ
2013-10-18 20:37 - 2013-11-08 13:47 - 00000000 ____D C:\ProgramData\CDB
2013-10-18 20:36 - 2013-11-08 16:54 - 00000000 ____D C:\rei
2013-10-18 20:36 - 2013-11-08 13:40 - 00000000 ____D C:\Program Files\Reimage
2013-10-18 20:36 - 2013-10-18 20:47 - 00000162 _____ C:\Windows\Reimage.ini
2013-10-18 20:11 - 2013-11-08 14:29 - 00000000 ____D C:\AdwCleaner
2013-10-18 19:49 - 2013-10-18 19:49 - 00000000 ____D C:\Windows\system32\appmgmt
2013-10-18 19:37 - 2013-10-18 19:37 - 00150616 _____ C:\Windows\Minidump\101813-23072-01.dmp
2013-10-18 18:15 - 2013-10-18 18:15 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\avgchrome
2013-10-18 16:06 - 2013-11-08 10:14 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\WinZip
2013-10-18 07:11 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-18 07:11 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-18 07:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-18 07:11 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-10-18 07:10 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-18 07:10 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-18 07:10 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-18 07:10 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-18 07:10 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-18 07:10 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-18 07:10 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-10-18 07:10 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-18 07:10 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-18 07:10 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-18 07:10 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-10-18 07:10 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-10-18 07:10 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-10-18 07:10 - 2013-03-19 05:53 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-10-18 07:10 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-10-17 07:01 - 2013-10-17 07:01 - 00153736 _____ C:\Windows\Minidump\101713-16364-01.dmp
2013-10-15 15:29 - 2013-10-15 15:29 - 00152744 _____ C:\Windows\Minidump\101513-16083-01.dmp
2013-10-15 08:22 - 2013-11-08 18:03 - 00002216 ____H C:\Users\MaBruMe\Documents\Default.rdp
2013-10-10 06:43 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 06:43 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 06:43 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 06:43 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 06:43 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 06:43 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 06:43 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-10 06:36 - 2013-10-10 06:36 - 00157744 _____ C:\Windows\Minidump\101013-17206-01.dmp
2013-10-10 06:22 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 06:22 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 06:22 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 06:22 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 06:22 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 06:22 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 06:22 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 06:22 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 06:22 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 06:22 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 06:22 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 06:22 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 06:22 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 06:22 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 06:15 - 2013-10-10 06:15 - 100221909 _____ C:\Windows\system32\丢ꦯᨬo

==================== One Month Modified Files and Folders =======

2013-11-08 18:21 - 2013-11-08 18:21 - 01089445 _____ (Farbar) C:\Users\MaBruMe\Desktop\FRST.exe
2013-11-08 18:19 - 2013-11-08 18:19 - 00891167 _____ C:\Users\MaBruMe\Desktop\SecurityCheck.exe
2013-11-08 18:03 - 2013-10-15 08:22 - 00002216 ____H C:\Users\MaBruMe\Documents\Default.rdp
2013-11-08 18:01 - 2013-06-02 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-08 17:25 - 2013-09-13 21:15 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-08 16:57 - 2013-10-25 23:55 - 00005746 _____ C:\Windows\system32\ScanResults.xml
2013-11-08 16:54 - 2013-10-25 23:53 - 00001056 _____ C:\Windows\system32\SettingsFile
2013-11-08 16:54 - 2013-10-18 20:36 - 00000000 ____D C:\rei
2013-11-08 15:57 - 2013-02-03 20:44 - 02025446 _____ C:\Windows\WindowsUpdate.log
2013-11-08 15:25 - 2013-09-13 21:14 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-08 14:40 - 2013-11-08 14:40 - 103148646 _____ C:\Windows\system32\蠭꾖ᨬb
2013-11-08 14:38 - 2009-07-14 05:34 - 00018960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-08 14:38 - 2009-07-14 05:34 - 00018960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-08 14:35 - 2013-11-08 14:35 - 00001375 _____ C:\Users\MaBruMe\Desktop\JRT.txt
2013-11-08 14:33 - 2013-11-08 14:33 - 00000000 ____D C:\Windows\ERUNT
2013-11-08 14:32 - 2013-11-08 14:32 - 01034531 _____ (Thisisu) C:\Users\MaBruMe\Desktop\JRT.exe
2013-11-08 14:30 - 2013-02-04 12:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-08 14:30 - 2013-02-04 09:39 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-11-08 14:30 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-08 14:30 - 2009-07-14 05:39 - 00048285 _____ C:\Windows\setupact.log
2013-11-08 14:29 - 2013-10-18 20:11 - 00000000 ____D C:\AdwCleaner
2013-11-08 14:25 - 2013-02-03 21:09 - 00001152 _____ C:\Users\MaBruMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 14:22 - 2013-11-08 14:22 - 01073262 _____ C:\Users\MaBruMe\Desktop\adwcleaner.exe
2013-11-08 14:20 - 2013-02-03 21:54 - 00078118 _____ C:\Windows\PFRO.log
2013-11-08 14:06 - 2013-11-08 14:06 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 14:06 - 2013-11-08 08:46 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-08 14:05 - 2013-11-08 14:04 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\MaBruMe\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-08 14:02 - 2013-11-08 13:28 - 00000000 ____D C:\Windows\pss
2013-11-08 13:59 - 2013-02-03 21:09 - 00000000 ____D C:\Users\MaBruMe
2013-11-08 13:47 - 2013-10-18 20:37 - 00000000 ____D C:\ProgramData\CDB
2013-11-08 13:47 - 2013-09-22 17:09 - 00000000 ____D C:\Program Files\WinZip
2013-11-08 13:47 - 2013-02-19 12:47 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-11-08 13:47 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2013-11-08 13:47 - 2009-07-14 09:57 - 00000000 ____D C:\Program Files\Windows Journal
2013-11-08 13:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\wfp
2013-11-08 13:47 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\Services
2013-11-08 13:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2013-11-08 13:40 - 2013-10-19 11:49 - 00000000 ____D C:\Program Files\TeamViewer
2013-11-08 13:40 - 2013-10-18 20:36 - 00000000 ____D C:\Program Files\Reimage
2013-11-08 13:40 - 2013-06-23 17:54 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\Google
2013-11-08 13:04 - 2013-02-03 21:10 - 00113112 _____ C:\Users\MaBruMe\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-08 11:45 - 2013-02-19 15:38 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-11-08 10:14 - 2013-10-18 16:06 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\WinZip
2013-11-08 09:15 - 2013-11-07 23:30 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Uniblue
2013-11-08 09:15 - 2013-11-07 23:30 - 00000000 ____D C:\Program Files\Uniblue
2013-11-08 08:46 - 2013-11-08 08:46 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Malwarebytes
2013-11-08 08:46 - 2013-11-08 08:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-08 00:17 - 2013-11-08 00:17 - 00000000 ____D C:\FRST
2013-11-08 00:15 - 2013-11-08 00:15 - 00000000 _____ C:\Users\MaBruMe\defogger_reenable
2013-11-07 22:54 - 2013-11-07 22:54 - 103000967 _____ C:\Windows\system32\聛㵹ᨬb
2013-11-07 16:54 - 2013-11-07 16:54 - 102946670 _____ C:\Windows\system32\䙝蟀ᨬb
2013-11-07 16:53 - 2013-02-04 11:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-07 10:38 - 2013-11-07 10:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-06 15:48 - 2013-02-03 21:14 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-06 15:28 - 2013-11-06 15:28 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-11-04 11:20 - 2013-11-04 11:20 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\digital publishing
2013-11-02 20:34 - 2013-02-27 09:38 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-11-02 20:28 - 2013-11-02 20:28 - 00157928 _____ C:\Windows\Minidump\110213-46550-01.dmp
2013-11-02 20:28 - 2013-04-29 18:31 - 195873750 _____ C:\Windows\MEMORY.DMP
2013-11-02 20:28 - 2013-04-29 18:31 - 00000000 ____D C:\Windows\Minidump
2013-11-02 18:31 - 2013-11-02 18:31 - 104684788 _____ C:\Windows\system32\䆅䄽ᨬi
2013-11-02 14:54 - 2013-11-02 14:54 - 00155448 _____ C:\Windows\Minidump\110213-16707-01.dmp
2013-10-30 19:26 - 2013-01-04 17:24 - 00000000 ____D C:\Users\MaBruMe\Documents\Esther
2013-10-29 17:02 - 2009-04-16 09:34 - 00090112 ___SH C:\Users\MaBruMe\Documents\Thumbs.db
2013-10-26 13:13 - 2013-10-26 13:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-10-19 17:35 - 2013-10-19 17:35 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\TeamViewer
2013-10-19 17:33 - 2009-07-14 05:33 - 00431976 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-19 12:12 - 2013-02-04 11:29 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\Mozilla
2013-10-19 11:49 - 2013-10-19 11:49 - 00001120 _____ C:\Users\MaBruMe\Documents\TeamViewer 8.lnk
2013-10-19 08:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-19 08:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-19 07:59 - 2013-10-19 07:59 - 00152272 _____ C:\Windows\Minidump\101913-17830-01.dmp
2013-10-19 07:52 - 2013-10-19 07:52 - 101890677 _____ C:\Windows\system32\쮏둇ᨬZ
2013-10-19 07:51 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-18 20:47 - 2013-10-18 20:36 - 00000162 _____ C:\Windows\Reimage.ini
2013-10-18 20:38 - 2013-02-07 07:41 - 00000000 ____D C:\Users\MaBruMe\Documents\Autobuyer
2013-10-18 20:34 - 2013-09-22 17:09 - 00000000 ____D C:\ProgramData\WinZip
2013-10-18 19:49 - 2013-10-18 19:49 - 00000000 ____D C:\Windows\system32\appmgmt
2013-10-18 19:37 - 2013-10-18 19:37 - 00150616 _____ C:\Windows\Minidump\101813-23072-01.dmp
2013-10-18 18:15 - 2013-10-18 18:15 - 00000000 ____D C:\Users\MaBruMe\AppData\Local\avgchrome
2013-10-18 15:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-10-17 21:46 - 2013-02-06 19:01 - 00000000 ____D C:\Users\MaBruMe\AppData\Roaming\Skype
2013-10-17 07:01 - 2013-10-17 07:01 - 00153736 _____ C:\Windows\Minidump\101713-16364-01.dmp
2013-10-15 15:29 - 2013-10-15 15:29 - 00152744 _____ C:\Windows\Minidump\101513-16083-01.dmp
2013-10-10 06:45 - 2013-08-14 09:59 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 06:44 - 2013-02-04 12:31 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 06:36 - 2013-10-10 06:36 - 00157744 _____ C:\Windows\Minidump\101013-17206-01.dmp
2013-10-10 06:15 - 2013-10-10 06:15 - 100221909 _____ C:\Windows\system32\丢ꦯᨬo
2013-10-09 10:01 - 2013-02-04 12:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-09 10:01 - 2013-02-04 12:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\MaBruMe\AppData\Local\Temp\AskSLib.dll
C:\Users\MaBruMe\AppData\Local\Temp\BackupSetup.exe
C:\Users\MaBruMe\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\MaBruMe\AppData\Local\Temp\MSETUP4.EXE
C:\Users\MaBruMe\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\MaBruMe\AppData\Local\Temp\nvStInst.exe
C:\Users\MaBruMe\AppData\Local\Temp\ose00000.exe
C:\Users\MaBruMe\AppData\Local\Temp\Quarantine.exe
C:\Users\MaBruMe\AppData\Local\Temp\ReimagePackage.exe
C:\Users\MaBruMe\AppData\Local\Temp\Setup.exe
C:\Users\MaBruMe\AppData\Local\Temp\sqlite3.exe
C:\Users\MaBruMe\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-31 09:12

==================== End Of Log ============================