Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Win32:Fareit-LM [Trj]

Win32:Fareit-LM [Trj]


Log-Analyse und Auswertung: Win32:Fareit-LM [Trj]

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Seite 1 von 2 1 2
Alt 06.12.2013, 18:56   #1
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Hallo liebes Trojaner Board, lang ist es ja nun doch (leider) noch nicht her. Ich hab keine Ahnung was bei mir in letzer Zeit los ist.

Avast spielt im Moment verrückt, ich hab ein paar Minuten Ruhe und dann bis zu 3 mal blinkt das Fenster, es wäre was gestoppt worden.

Der Name des hübschen lautet Win32:Fareit-LM [Trj]
was mich allerdings stutzig macht ist die Adresse woher es kommt
hxxp://r5---sn-i5onxoxu-cxgl.c.pack.google.com/edgedl/update2/1.3.22.3/GoogleUpdateSetup.exe?cms_redirect


google und update?
Ich hab natürlich schon fleißig geguckt ob ich selbst was finde, aber nur Leute die das selbe Problem haben (irgendwie hauptsächlich englisch sprachige und eine französische seite)
Lösung gibt es irgendwie keine und irgendwo habe ich etwas von einem false positive gelesen.


Vielleicht (hoffentlich!) könnt ihr mir wieder einmal ganz wunderbar weiterhelfen.

freundliche Grüße

Alt 06.12.2013, 22:35   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 06.12.2013, 23:42   #3
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Nein ich habe keine Logs und selbst Avast, das ich heute als das Problem auftrat einmal komplett, nicht nur schnell, habe drüber laufen lassen hat nichts gefunden.

es war wirklich heute nur die ich sag mal ersten 2 Stunden nachdem ich am Rechner war, das es immer wieder auftrat.

Jemand hat sich auch bei mir sofort in den privaten Nachrichten gemeldet und gemeint ich soll alles vom Netz nehmen, das ist ein neuer Trojaner der Passwörter von Chrome sammelt.
Aber ich nutze gar kein Chrome sondern Firefox. Ö.ö
Jetzt bin ich natürlich leicht verwirrt.

wie gewünscht jetzt ein FRST log und der Addition.


FRST

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2013 02
Ran by Mnemosyne (administrator) on KEKZ on 06-12-2013 23:34:06
Running from C:\Users\Mnemosyne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Windows\SysWOW64\PSIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
() C:\Program Files (x86)\Trillian\plugins\skypekit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1873256 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646232 2011-09-27] ()
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [MessengerPlusForSkypeService] - "C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-08] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\d17f1163-2a1c-41e9-b9fc-6085a1d5026f.exe [180184 2013-11-23] (AVAST Software)
AppInit_DLLs:  [ ] ()
Startup: C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8F7598702228CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: adblockpopups - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: elemhidehelper - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: lazarus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\lazarus@interclue.com.xpi
FF Extension: noscript - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Docs) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-08] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-24] (DT Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-06 23:34 - 2013-12-06 23:34 - 00015231 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-06 23:32 - 2013-12-06 23:32 - 01927164 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-02 20:40 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-02 20:40 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 20:05 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-19 19:51 - 2013-12-02 20:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 01:20 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 01:15 - 2013-11-16 01:20 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-14 18:32 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 18:32 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 18:32 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 18:31 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 18:31 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 18:31 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 18:31 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 18:31 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 18:31 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 18:31 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 18:31 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 18:31 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 18:31 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 18:31 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 18:31 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

==================== One Month Modified Files and Folders =======

2013-12-06 23:34 - 2013-12-06 23:34 - 00015231 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-06 23:32 - 2013-12-06 23:32 - 01927164 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-06 22:38 - 2013-09-06 19:11 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-06 22:31 - 2012-01-01 12:05 - 01423522 _____ C:\Windows\WindowsUpdate.log
2013-12-06 19:38 - 2013-09-06 19:11 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-06 19:33 - 2013-09-06 19:11 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 19:33 - 2013-09-06 19:11 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 18:15 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-06 18:15 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-06 18:07 - 2012-07-07 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-06 18:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-06 18:07 - 2009-07-14 05:51 - 00062408 _____ C:\Windows\setupact.log
2013-12-05 16:45 - 2013-09-02 21:48 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-02 20:42 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA
2013-12-02 20:41 - 2013-11-19 19:51 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-12-02 20:41 - 2012-07-07 16:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-29 17:56 - 2013-10-28 21:27 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-10-28 21:27 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-20 23:49 - 2012-04-14 10:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-20 23:49 - 2012-01-16 20:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 23:49 - 2012-01-16 17:31 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\Adobe
2013-11-17 18:48 - 2013-09-06 19:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 20:02 - 2011-04-12 08:43 - 00696848 _____ C:\Windows\system32\perfh007.dat
2013-11-16 20:02 - 2011-04-12 08:43 - 00148144 _____ C:\Windows\system32\perfc007.dat
2013-11-16 20:02 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-16 17:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 15:52 - 2012-01-16 12:35 - 00001421 _____ C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 15:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 01:20 - 2013-11-16 01:15 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 22:05 - 2013-08-14 23:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:03 - 2012-01-27 12:55 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 12:56 - 2013-11-19 20:05 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-19 20:05 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2013-05-23 17:18 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-11 16:02 - 2012-07-07 16:44 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-07-07 16:44 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-07-07 16:44 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-07-07 16:44 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-09 22:13 - 2012-01-16 14:20 - 00000000 ____D C:\Users\Mnemosyne\.gimp-2.6
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 22:12 - 2012-01-16 12:35 - 00000000 ____D C:\Users\Mnemosyne
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-09 18:25 - 2013-09-03 20:38 - 00000000 ____D C:\Windows\erdnt
2013-11-08 23:30 - 2010-11-21 04:47 - 00250144 _____ C:\Windows\PFRO.log
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-08 23:26 - 2013-09-02 21:48 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-08 23:26 - 2013-09-02 21:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

Some content of TEMP:
====================
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 02:14

==================== End Of Log ============================
--- --- ---



Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-12-2013 02
Ran by Mnemosyne at 2013-12-06 23:34:57
Running from C:\Users\Mnemosyne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Community Help (x32 Version: 3.0.0)
Adobe Community Help (x32 Version: 3.0.0.400)
Adobe Creative Suite 5 Master Collection (x32 Version: 5.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Media Player (x32 Version: 1.8)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
ArtRage Studio Pro (x32 Version: 3.5.5)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.8.0)
avast! Free Antivirus (x32 Version: 9.0.2007)
Bamboo (Version: 5.2.5-5)
Bamboo Dock (x32 Version: 4.0)
Bamboo Dock (x32 Version: 4.0.0)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (x32)
Benutzerhandbuch EPSON XP-402 403 405 406 Series (x32)
BioShock (x32 Version: 2.62.0000)
CCleaner (Version: 4.00)
Corel Painter Essentials 4 (x32 Version: 4.0)
Corel Painter Essentials 4 (x32)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Die Sims™ 3 (x32 Version: 1.50.56)
Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.0.55)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.0.44)
Die Sims™ 3 Late Night (x32 Version: 6.0.81)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86)
Die Sims™ 3 Showtime (x32 Version: 12.0.273)
Die Sims™ 3 Stadt-Accessoires (x32 Version: 9.0.73)
Die Sims™ 3 Supernatural (x32 Version: 15.0.135)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)
Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84)
Download Navigator (x32 Version: 3.4.1)
Epson Easy Photo Print 2 (x32 Version: 2.3.2.0)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000)
Epson Event Manager (x32 Version: 3.01.0000)
EPSON Scan (x32)
EPSON XP-402 403 405 406 Series Printer Uninstall
EpsonNet Print (x32 Version: 2.5.00)
FileZilla Client 3.7.1 (x32 Version: 3.7.1)
Free Studio version 2013 (x32 Version: 6.1.10.812)
Free YouTube to MP3 Converter version 3.12.13.925 (x32 Version: 3.12.13.925)
GeForce Experience NvStream Client Components (Version: 1.6.28)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.21.165)
Guard.ICQ (x32)
ICQ7.7 (x32 Version: 7.7)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 37 (x32 Version: 6.0.370)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (x32)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
Origin (x32 Version: 8.6.0.357)
PDF Settings CS5 (x32 Version: 10.0)
Pharao (x32)
PreReq (x32 Version: 6.2.4.0)
PxMergeModule (x32 Version: 1.00.0000)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526)
SHIELD Streaming (Version: 1.6.75)
Skype™ 6.7 (x32 Version: 6.7.102)
Tomb Raider: Anniversary 1.0 (x32)
Torchlight (x32 Version: 1.0.0)
Torchlight German Patch (x32 Version: 1.0.0)
Trillian (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Vampire - The Masquerade Bloodlines (x32 Version: 1.00.0000)
WebTablet FB Plugin (x32 Version: 2.0.0.1)
WebTablet IE Plugin (x32 Version: 1.1.0.12)
WebTablet Netscape Plugin (x32 Version: 1.1.0.10)
WinRAR 5.00 (32-bit) (x32 Version: 5.00.0)

==================== Restore Points  =========================

12-11-2013 17:15:20 Windows Update
14-11-2013 21:03:10 Windows Update
16-11-2013 00:15:09 Windows Update
19-11-2013 17:19:52 Windows Update
26-11-2013 17:47:50 Windows Update
29-11-2013 18:49:35 Windows Update
03-12-2013 17:14:53 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-09-25 16:31 - 00000087 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com


==================== Scheduled Tasks (whitelisted) =============

Task: {13FC3A88-7DB7-4368-B97C-59876077766E} - System32\Tasks\{DA334DD2-F63B-4BFF-98BC-652B20E08EAE} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {1FE9BC8A-B82E-4C9A-977C-15CEAE7A4379} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {2870937E-9F74-4FB6-A960-9F1774955BE4} - System32\Tasks\{94DC0BFC-3DDF-4485-8A41-928717CB26B5} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2AF75043-1A8F-4E9C-890B-F86CCC262A72} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {2D6574E5-2809-4968-9CB4-63015EF18A50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-08] (AVAST Software)
Task: {2F6FB4DD-89C4-488E-862F-FC1E3E8629A5} - System32\Tasks\{9ADDDA80-C99D-4140-8EF6-C2300E814D65} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2F912C6B-2D26-4C28-BC90-960140EC2F38} - System32\Tasks\{A8B94B43-3AB6-482A-80A3-EF19837CBFC1} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {4DAF3558-3F38-4835-AEF6-EF5D4CD10783} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {59453F9F-DF7C-47AD-BB46-AD56D4939C8B} - System32\Tasks\{90EA3B56-34E7-41DA-8643-B1930CB603BF} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {66A342F1-7522-45FF-A6BF-8DEC2C1EC580} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {7CDC7AAA-F4DC-45D6-BFB9-80ACDF39F403} - System32\Tasks\{5C6BEA30-BB2C-424D-815F-F56FF02E2B15} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {7D979323-F5CB-4071-A776-EF5FB2A9F2C6} - System32\Tasks\{73BC9927-174E-4BC5-89F5-56691C32E054} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {8A756D2A-D6A6-4B50-A5F3-46B086270BA5} - System32\Tasks\{FCA1AD46-06F7-4EFB-829F-1BC8CEDADD2C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {AFAFE870-B53A-49C9-B77A-54064D7FC68D} - System32\Tasks\{EA7371E2-7B04-48A6-B738-A4B39C9BD90C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B314C6F0-CB1D-4128-878D-4BF75D1AD8B2} - System32\Tasks\{000B787D-91A3-4DEA-82FA-7349F8A14AEC} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B854BDDB-0E12-4413-A68E-CE9E674F1D60} - System32\Tasks\{EEB23FCA-527B-4134-ADB3-0ADA9FDE56B9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B9ACFBF8-209B-4268-9F38-D1222C763C65} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10] (Microsoft Corporation)
Task: {C8735AE6-6299-4B85-8889-F24410DA4E7F} - System32\Tasks\{AB3ACEF7-9979-42DF-9738-86F85AFEBADA} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {C970EC5F-B82D-4E6D-98F8-66F76C7D1067} - System32\Tasks\{927108AD-90E8-4CB0-A338-5237650BF34F} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {D156A29F-F835-459E-AA35-2EF899C5312D} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {E4450A27-FBA1-4B1D-B454-72228607C10A} - System32\Tasks\{62377DDD-9C63-42A7-9F2D-CB05CEF89C44} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {EA0C451A-4DB4-4967-B5FF-E37CBE1E44AB} - System32\Tasks\{140B5FA2-D27D-480E-992D-C53FE5F93BB7} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {ED2D3459-AD4C-4CF5-9B00-F1695EE29476} - System32\Tasks\{0456133A-8D2D-49DD-952A-9735284B27FA} => C:\Program Files (x86)\Electronic Arts\Die Sims 3 Showtime\Game\Bin\Sims3Launcher.exe [2012-02-02] (Electronic Arts, Inc.)
Task: {FF064ADE-20FF-42BF-AD35-0E543037AE6F} - System32\Tasks\{8C92DE5D-2545-46AF-BD0D-F1ECE35C18A9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-01-25 17:19 - 2011-09-08 16:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-12-06 18:08 - 2013-12-06 13:30 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120600\algo.dll
2013-10-21 11:26 - 2013-10-21 11:26 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00002048 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\toolkit.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00007168 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\events.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00009728 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\buddy.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00006144 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\talk.dll
2012-05-02 10:40 - 2012-05-02 10:40 - 00005120 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\trillian.dll
2013-11-16 16:09 - 2013-11-16 16:09 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-11-16 15:57 - 2013-11-16 15:57 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\R7lzU9Yx11:GRVHpujCk2u38rAe8
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Temp:1Th6C9jBklNwTNamyZdBQfE6VLab0g

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/06/2013 06:36:09 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/06/2013 06:09:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 06:08:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: trillian.exe, Version: 5.4.0.13, Zeitstempel: 0x52654569
Name des fehlerhaften Moduls: talk.dll, Version: 5.4.0.13, Zeitstempel: 0x5265451e
Ausnahmecode: 0xc0000409
Fehleroffset: 0x001b1ef2
ID des fehlerhaften Prozesses: 0xe28
Startzeit der fehlerhaften Anwendung: 0xtrillian.exe0
Pfad der fehlerhaften Anwendung: trillian.exe1
Pfad des fehlerhaften Moduls: trillian.exe2
Berichtskennung: trillian.exe3

Error: (12/05/2013 08:46:18 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/05/2013 05:49:01 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/05/2013 04:46:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/04/2013 08:33:25 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/03/2013 07:13:44 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/03/2013 06:12:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 08:45:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/16/2013 07:59:14 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/16/2013 07:59:14 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/16/2013 07:59:13 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/16/2013 07:59:13 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Microsoft Office Sessions:
=========================
Error: (12/06/2013 06:36:09 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/06/2013 06:09:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 06:08:45 PM) (Source: Application Error)(User: )
Description: trillian.exe5.4.0.1352654569talk.dll5.4.0.135265451ec0000409001b1ef2e2801cef2a5ceeeb6b7C:\Program Files (x86)\Trillian\trillian.exeC:\Program Files (x86)\Trillian\talk.dll0ff8f3ba-5e99-11e3-8094-5404a62f5a55

Error: (12/05/2013 08:46:18 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/05/2013 05:49:01 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/05/2013 04:46:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/04/2013 08:33:25 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/03/2013 07:13:44 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/03/2013 06:12:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 08:45:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-09-03 22:13:15.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-03 22:13:15.281
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-01 00:51:56.227
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:56.080
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.933
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.749
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.614
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.591
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.456
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 8154.44 MB
Available physical RAM: 4595.75 MB
Total Pagefile: 16307.06 MB
Available Pagefile: 12856.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:522.56 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E87C0DFF)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
__________________
Alt 06.12.2013, 23:45   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 07.12.2013, 00:06   #5
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Argh die finden alle nichts, Hilfe. @-@


Malwarebytes Anti-Rootkit:

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1007
www.malwarebytes.org

Database version: v2013.12.06.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Mnemosyne :: KEKZ [administrator]

06.12.2013 23:53:38
mbar-log-2013-12-06 (23-53-38).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 230528
Time elapsed: 8 minute(s), 8 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)


Alt 07.12.2013, 15:39   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
--> Win32:Fareit-LM [Trj]

Alt 08.12.2013, 00:08   #7
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Hier Junkware Meldung

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Mnemosyne on 07.12.2013 at 23:47:31,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\messengerplusforskypeservice
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\messengerplusforskypeservice



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Mnemosyne\AppData\Roaming\mozilla\firefox\profiles\cs4xmjm7.default\minidumps [35 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.12.2013 at 23:53:07,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Und hier der Adware Cleaner log

Code:
ATTFilter
# AdwCleaner v3.014 - Bericht erstellt am 07/12/2013 um 23:43:08
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Mnemosyne - KEKZ
# Gestartet von : C:\Users\Mnemosyne\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\Users\Mnemosyne\AppData\Roaming\NCH Software
Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\NCH Software

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v25.0.1 (de)

[ Datei : C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\prefs.js ]


-\\ Google Chrome v31.0.1650.63

[ Datei : C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3548 octets] - [04/09/2013 14:49:25]
AdwCleaner[R1].txt - [1330 octets] - [07/12/2013 23:41:47]
AdwCleaner[S0].txt - [3457 octets] - [04/09/2013 14:51:17]
AdwCleaner[S1].txt - [1200 octets] - [07/12/2013 23:43:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1260 octets] ##########

Ein frischer FRST log ist nich möglich, auch nach Neuinstallation bricht er ab mit einer Fehlermeldung, genau wenn er versucht Google Chrome Sachen zu scannen.
Fehlermeldung lautet:

Line 9537 (File "C:\User\Mnemosyne\Desktop\FRST64.exe"):
Error: Variable used without being declared.

Alt 08.12.2013, 17:27   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


FRST neu runterladen und nochmal probieren
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.12.2013, 20:14   #9
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Neu runterladen und starten hat (endlich) geklappt.
selbst da gab es gestern einige Probleme @-@

Hier der FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 02
Ran by Mnemosyne (administrator) on KEKZ on 08-12-2013 18:31:13
Running from C:\Users\Mnemosyne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PSIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
() C:\Program Files (x86)\Trillian\plugins\skypekit.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1873256 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646232 2011-09-27] ()
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [MessengerPlusForSkypeService] - "C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-08] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\d17f1163-2a1c-41e9-b9fc-6085a1d5026f.exe [180184 2013-11-23] (AVAST Software)
AppInit_DLLs:  [ ] ()
Startup: C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8F7598702228CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: adblockpopups - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: elemhidehelper - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: lazarus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\lazarus@interclue.com.xpi
FF Extension: noscript - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Docs) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-08] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-24] (DT Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-08 18:30 - 2013-12-08 18:30 - 01927772 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-07 23:54 - 2013-12-07 23:54 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT1.txt
2013-12-07 23:53 - 2013-12-07 23:53 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT.txt
2013-12-07 23:46 - 2013-12-07 23:46 - 00001340 _____ C:\Users\Mnemosyne\Desktop\AdwCleaner[S1].txt
2013-12-07 23:39 - 2013-12-07 23:39 - 01110034 _____ C:\Users\Mnemosyne\Desktop\adwcleaner.exe
2013-12-07 23:39 - 2013-12-07 23:39 - 01034531 _____ (Thisisu) C:\Users\Mnemosyne\Desktop\JRT.exe
2013-12-06 23:53 - 2013-12-07 00:01 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-06 23:53 - 2013-12-06 23:53 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-06 23:52 - 2013-12-07 00:04 - 00000000 ____D C:\Users\Mnemosyne\Desktop\mbar
2013-12-06 23:50 - 2013-12-07 00:04 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-06 23:47 - 2013-12-06 23:51 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Mnemosyne\Desktop\mbar-1.07.0.1007.exe
2013-12-06 23:34 - 2013-12-08 18:31 - 00015095 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-06 23:34 - 2013-12-06 23:35 - 00025162 _____ C:\Users\Mnemosyne\Desktop\Addition.txt
2013-12-02 20:40 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-02 20:40 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 20:05 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-19 19:51 - 2013-12-02 20:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 01:20 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 01:15 - 2013-11-16 01:20 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-14 18:32 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 18:32 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 18:32 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 18:31 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 18:31 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 18:31 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 18:31 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 18:31 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 18:31 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 18:31 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 18:31 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 18:31 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 18:31 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 18:31 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 18:31 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

==================== One Month Modified Files and Folders =======

2013-12-08 18:31 - 2013-12-06 23:34 - 00015095 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-08 18:30 - 2013-12-08 18:30 - 01927772 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-08 18:28 - 2012-01-01 12:05 - 01493037 _____ C:\Windows\WindowsUpdate.log
2013-12-08 18:27 - 2013-09-06 19:11 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-08 18:24 - 2012-07-07 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-08 18:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 18:24 - 2009-07-14 05:51 - 00062912 _____ C:\Windows\setupact.log
2013-12-08 02:38 - 2013-09-06 19:11 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-08 00:00 - 2013-11-01 20:52 - 00000000 ____D C:\FRST
2013-12-07 23:54 - 2013-12-07 23:54 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT1.txt
2013-12-07 23:53 - 2013-12-07 23:53 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT.txt
2013-12-07 23:52 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:52 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:46 - 2013-12-07 23:46 - 00001340 _____ C:\Users\Mnemosyne\Desktop\AdwCleaner[S1].txt
2013-12-07 23:43 - 2013-09-04 14:49 - 00000000 ____D C:\AdwCleaner
2013-12-07 23:39 - 2013-12-07 23:39 - 01110034 _____ C:\Users\Mnemosyne\Desktop\adwcleaner.exe
2013-12-07 23:39 - 2013-12-07 23:39 - 01034531 _____ (Thisisu) C:\Users\Mnemosyne\Desktop\JRT.exe
2013-12-07 00:04 - 2013-12-06 23:52 - 00000000 ____D C:\Users\Mnemosyne\Desktop\mbar
2013-12-07 00:04 - 2013-12-06 23:50 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-07 00:01 - 2013-12-06 23:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-06 23:53 - 2013-12-06 23:53 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-06 23:51 - 2013-12-06 23:47 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Mnemosyne\Desktop\mbar-1.07.0.1007.exe
2013-12-06 23:35 - 2013-12-06 23:34 - 00025162 _____ C:\Users\Mnemosyne\Desktop\Addition.txt
2013-12-06 19:33 - 2013-09-06 19:11 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 19:33 - 2013-09-06 19:11 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 16:45 - 2013-09-02 21:48 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-02 20:42 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA
2013-12-02 20:41 - 2013-11-19 19:51 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-12-02 20:41 - 2012-07-07 16:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-29 17:56 - 2013-10-28 21:27 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-10-28 21:27 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-20 23:49 - 2012-04-14 10:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-20 23:49 - 2012-01-16 20:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 23:49 - 2012-01-16 17:31 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\Adobe
2013-11-17 18:48 - 2013-09-06 19:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 20:02 - 2011-04-12 08:43 - 00696848 _____ C:\Windows\system32\perfh007.dat
2013-11-16 20:02 - 2011-04-12 08:43 - 00148144 _____ C:\Windows\system32\perfc007.dat
2013-11-16 20:02 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-16 17:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 15:52 - 2012-01-16 12:35 - 00001421 _____ C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 15:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 01:20 - 2013-11-16 01:15 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 22:05 - 2013-08-14 23:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:03 - 2012-01-27 12:55 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 12:56 - 2013-11-19 20:05 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-19 20:05 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2013-05-23 17:18 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-11 16:02 - 2012-07-07 16:44 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-07-07 16:44 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-07-07 16:44 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-07-07 16:44 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-09 22:13 - 2012-01-16 14:20 - 00000000 ____D C:\Users\Mnemosyne\.gimp-2.6
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 22:12 - 2012-01-16 12:35 - 00000000 ____D C:\Users\Mnemosyne
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-09 18:25 - 2013-09-03 20:38 - 00000000 ____D C:\Windows\erdnt
2013-11-08 23:30 - 2010-11-21 04:47 - 00250144 _____ C:\Windows\PFRO.log
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-08 23:26 - 2013-09-02 21:48 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-08 23:26 - 2013-09-02 21:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

Some content of TEMP:
====================
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 02:14

==================== End Of Log ============================
--- --- ---



und der Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 02
Ran by Mnemosyne at 2013-12-08 18:31:51
Running from C:\Users\Mnemosyne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Community Help (x32 Version: 3.0.0)
Adobe Community Help (x32 Version: 3.0.0.400)
Adobe Creative Suite 5 Master Collection (x32 Version: 5.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Media Player (x32 Version: 1.8)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
ArtRage Studio Pro (x32 Version: 3.5.5)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.8.0)
avast! Free Antivirus (x32 Version: 9.0.2007)
Bamboo (Version: 5.2.5-5)
Bamboo Dock (x32 Version: 4.0)
Bamboo Dock (x32 Version: 4.0.0)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (x32)
Benutzerhandbuch EPSON XP-402 403 405 406 Series (x32)
BioShock (x32 Version: 2.62.0000)
CCleaner (Version: 4.00)
Corel Painter Essentials 4 (x32 Version: 4.0)
Corel Painter Essentials 4 (x32)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Die Sims™ 3 (x32 Version: 1.50.56)
Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.0.55)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.0.44)
Die Sims™ 3 Late Night (x32 Version: 6.0.81)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86)
Die Sims™ 3 Showtime (x32 Version: 12.0.273)
Die Sims™ 3 Stadt-Accessoires (x32 Version: 9.0.73)
Die Sims™ 3 Supernatural (x32 Version: 15.0.135)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)
Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84)
Download Navigator (x32 Version: 3.4.1)
Epson Easy Photo Print 2 (x32 Version: 2.3.2.0)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000)
Epson Event Manager (x32 Version: 3.01.0000)
EPSON Scan (x32)
EPSON XP-402 403 405 406 Series Printer Uninstall
EpsonNet Print (x32 Version: 2.5.00)
FileZilla Client 3.7.1 (x32 Version: 3.7.1)
Free Studio version 2013 (x32 Version: 6.1.10.812)
Free YouTube to MP3 Converter version 3.12.13.925 (x32 Version: 3.12.13.925)
GeForce Experience NvStream Client Components (Version: 1.6.28)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
Guard.ICQ (x32)
ICQ7.7 (x32 Version: 7.7)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 37 (x32 Version: 6.0.370)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (x32)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
Origin (x32 Version: 8.6.0.357)
PDF Settings CS5 (x32 Version: 10.0)
Pharao (x32)
PreReq (x32 Version: 6.2.4.0)
PxMergeModule (x32 Version: 1.00.0000)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526)
SHIELD Streaming (Version: 1.6.75)
Skype™ 6.7 (x32 Version: 6.7.102)
Tomb Raider: Anniversary 1.0 (x32)
Torchlight (x32 Version: 1.0.0)
Torchlight German Patch (x32 Version: 1.0.0)
Trillian (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Vampire - The Masquerade Bloodlines (x32 Version: 1.00.0000)
WebTablet FB Plugin (x32 Version: 2.0.0.1)
WebTablet IE Plugin (x32 Version: 1.1.0.12)
WebTablet Netscape Plugin (x32 Version: 1.1.0.10)
WinRAR 5.00 (32-bit) (x32 Version: 5.00.0)

==================== Restore Points  =========================

12-11-2013 17:15:20 Windows Update
14-11-2013 21:03:10 Windows Update
16-11-2013 00:15:09 Windows Update
19-11-2013 17:19:52 Windows Update
26-11-2013 17:47:50 Windows Update
29-11-2013 18:49:35 Windows Update
03-12-2013 17:14:53 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-09-25 16:31 - 00000087 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com


==================== Scheduled Tasks (whitelisted) =============

Task: {13FC3A88-7DB7-4368-B97C-59876077766E} - System32\Tasks\{DA334DD2-F63B-4BFF-98BC-652B20E08EAE} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {1FE9BC8A-B82E-4C9A-977C-15CEAE7A4379} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {2870937E-9F74-4FB6-A960-9F1774955BE4} - System32\Tasks\{94DC0BFC-3DDF-4485-8A41-928717CB26B5} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2AF75043-1A8F-4E9C-890B-F86CCC262A72} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {2D6574E5-2809-4968-9CB4-63015EF18A50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-08] (AVAST Software)
Task: {2F6FB4DD-89C4-488E-862F-FC1E3E8629A5} - System32\Tasks\{9ADDDA80-C99D-4140-8EF6-C2300E814D65} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2F912C6B-2D26-4C28-BC90-960140EC2F38} - System32\Tasks\{A8B94B43-3AB6-482A-80A3-EF19837CBFC1} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {4DAF3558-3F38-4835-AEF6-EF5D4CD10783} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {59453F9F-DF7C-47AD-BB46-AD56D4939C8B} - System32\Tasks\{90EA3B56-34E7-41DA-8643-B1930CB603BF} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {66A342F1-7522-45FF-A6BF-8DEC2C1EC580} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {7CDC7AAA-F4DC-45D6-BFB9-80ACDF39F403} - System32\Tasks\{5C6BEA30-BB2C-424D-815F-F56FF02E2B15} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {7D979323-F5CB-4071-A776-EF5FB2A9F2C6} - System32\Tasks\{73BC9927-174E-4BC5-89F5-56691C32E054} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {8A756D2A-D6A6-4B50-A5F3-46B086270BA5} - System32\Tasks\{FCA1AD46-06F7-4EFB-829F-1BC8CEDADD2C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {AFAFE870-B53A-49C9-B77A-54064D7FC68D} - System32\Tasks\{EA7371E2-7B04-48A6-B738-A4B39C9BD90C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B314C6F0-CB1D-4128-878D-4BF75D1AD8B2} - System32\Tasks\{000B787D-91A3-4DEA-82FA-7349F8A14AEC} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B854BDDB-0E12-4413-A68E-CE9E674F1D60} - System32\Tasks\{EEB23FCA-527B-4134-ADB3-0ADA9FDE56B9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B9ACFBF8-209B-4268-9F38-D1222C763C65} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10] (Microsoft Corporation)
Task: {C8735AE6-6299-4B85-8889-F24410DA4E7F} - System32\Tasks\{AB3ACEF7-9979-42DF-9738-86F85AFEBADA} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {C970EC5F-B82D-4E6D-98F8-66F76C7D1067} - System32\Tasks\{927108AD-90E8-4CB0-A338-5237650BF34F} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {D156A29F-F835-459E-AA35-2EF899C5312D} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {E4450A27-FBA1-4B1D-B454-72228607C10A} - System32\Tasks\{62377DDD-9C63-42A7-9F2D-CB05CEF89C44} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {EA0C451A-4DB4-4967-B5FF-E37CBE1E44AB} - System32\Tasks\{140B5FA2-D27D-480E-992D-C53FE5F93BB7} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {ED2D3459-AD4C-4CF5-9B00-F1695EE29476} - System32\Tasks\{0456133A-8D2D-49DD-952A-9735284B27FA} => C:\Program Files (x86)\Electronic Arts\Die Sims 3 Showtime\Game\Bin\Sims3Launcher.exe [2012-02-02] (Electronic Arts, Inc.)
Task: {FF064ADE-20FF-42BF-AD35-0E543037AE6F} - System32\Tasks\{8C92DE5D-2545-46AF-BD0D-F1ECE35C18A9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-01-25 17:19 - 2011-09-08 16:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-12-08 18:26 - 2013-12-08 10:40 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120800\algo.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00002048 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\toolkit.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00007168 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\events.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00009728 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\buddy.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00006144 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\talk.dll
2012-05-02 10:40 - 2012-05-02 10:40 - 00005120 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\trillian.dll
2013-10-21 11:26 - 2013-10-21 11:26 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-16 16:09 - 2013-11-16 16:09 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\R7lzU9Yx11:GRVHpujCk2u38rAe8
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Temp:1Th6C9jBklNwTNamyZdBQfE6VLab0g

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/08/2013 06:25:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 03:21:15 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (12/08/2013 06:25:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 03:21:15 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


CodeIntegrity Errors:
===================================
  Date: 2013-09-03 22:13:15.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-03 22:13:15.281
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-01 00:51:56.227
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:56.080
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.933
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.749
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.614
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.591
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.456
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 8154.44 MB
Available physical RAM: 5823.13 MB
Total Pagefile: 16307.06 MB
Available Pagefile: 13866.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:522.49 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E87C0DFF)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Alt 08.12.2013, 20:40   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Oh, das fällt mir jetzt erst auf:

Zitat:
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com

Adobe Creative Suite 5 Master Collection (x32 Version: 5.0)
Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.12.2013, 20:52   #11
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Okay ich melde mich wieder wenn ich alles besten Wissens entfernt habe.
Soll ich dann einen neuen FRST erstellen oder kannst/darfst du mit dem alten arbeiten?
Macht mir natürlich nichts aus zum Beweis sozusagen noch mal ein neues FRST zu machen.

Alt 08.12.2013, 20:53   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


ja bitte neue FRST danach machen
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.12.2013, 21:06   #13
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Entschuldige bitte die Umstände

Hier neuer FRST

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 02
Ran by Mnemosyne (administrator) on KEKZ on 08-12-2013 20:58:59
Running from C:\Users\Mnemosyne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PSIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
() C:\Program Files (x86)\Trillian\plugins\skypekit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [1873256 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646232 2011-09-27] ()
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [MessengerPlusForSkypeService] - "C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-08] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\d17f1163-2a1c-41e9-b9fc-6085a1d5026f.exe [180184 2013-11-23] (AVAST Software)
AppInit_DLLs:  [ ] ()
Startup: C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8F7598702228CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: adblockpopups - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: elemhidehelper - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: lazarus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\lazarus@interclue.com.xpi
FF Extension: noscript - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\Mnemosyne\AppData\Roaming\Mozilla\Firefox\Profiles\cs4xmjm7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Docs) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Mnemosyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-08] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-16] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
S2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-24] (DT Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-08 18:30 - 2013-12-08 18:30 - 01927772 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-07 23:54 - 2013-12-07 23:54 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT1.txt
2013-12-07 23:53 - 2013-12-07 23:53 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT.txt
2013-12-07 23:46 - 2013-12-07 23:46 - 00001340 _____ C:\Users\Mnemosyne\Desktop\AdwCleaner[S1].txt
2013-12-07 23:39 - 2013-12-07 23:39 - 01110034 _____ C:\Users\Mnemosyne\Desktop\adwcleaner.exe
2013-12-07 23:39 - 2013-12-07 23:39 - 01034531 _____ (Thisisu) C:\Users\Mnemosyne\Desktop\JRT.exe
2013-12-06 23:53 - 2013-12-07 00:01 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-06 23:53 - 2013-12-06 23:53 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-06 23:52 - 2013-12-07 00:04 - 00000000 ____D C:\Users\Mnemosyne\Desktop\mbar
2013-12-06 23:50 - 2013-12-07 00:04 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-06 23:47 - 2013-12-06 23:51 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Mnemosyne\Desktop\mbar-1.07.0.1007.exe
2013-12-06 23:34 - 2013-12-08 20:59 - 00014535 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-06 23:34 - 2013-12-08 18:42 - 00021272 _____ C:\Users\Mnemosyne\Desktop\Addition.txt
2013-12-02 20:40 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-02 20:40 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-19 20:05 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-19 20:05 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-19 19:51 - 2013-12-02 20:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 01:20 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-16 01:15 - 2013-11-16 01:20 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-14 18:32 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 18:32 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 18:32 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 18:31 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 18:31 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 18:31 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 18:31 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 18:31 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 18:31 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 18:31 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 18:31 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 18:31 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 18:31 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 18:31 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 18:31 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 18:31 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 18:31 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 18:31 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 18:31 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 18:31 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 18:31 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 18:31 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

==================== One Month Modified Files and Folders =======

2013-12-08 20:59 - 2013-12-06 23:34 - 00014535 _____ C:\Users\Mnemosyne\Desktop\FRST.txt
2013-12-08 20:57 - 2012-01-16 17:31 - 00000000 ____D C:\ProgramData\Adobe
2013-12-08 20:57 - 2012-01-16 17:31 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-08 20:56 - 2012-02-24 17:40 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-12-08 20:53 - 2012-01-16 12:35 - 00000000 ____D C:\Users\Mnemosyne
2013-12-08 20:50 - 2012-01-16 14:04 - 00000000 ____D C:\Users\Mnemosyne\AppData\Roaming\Adobe
2013-12-08 20:38 - 2013-09-06 19:11 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-08 20:34 - 2012-01-01 12:05 - 01495719 _____ C:\Windows\WindowsUpdate.log
2013-12-08 19:38 - 2013-09-06 19:11 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-08 18:42 - 2013-12-06 23:34 - 00021272 _____ C:\Users\Mnemosyne\Desktop\Addition.txt
2013-12-08 18:32 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-08 18:32 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-08 18:30 - 2013-12-08 18:30 - 01927772 _____ (Farbar) C:\Users\Mnemosyne\Desktop\FRST64.exe
2013-12-08 18:24 - 2012-07-07 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-08 18:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 18:24 - 2009-07-14 05:51 - 00062912 _____ C:\Windows\setupact.log
2013-12-08 00:00 - 2013-11-01 20:52 - 00000000 ____D C:\FRST
2013-12-07 23:54 - 2013-12-07 23:54 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT1.txt
2013-12-07 23:53 - 2013-12-07 23:53 - 00001041 _____ C:\Users\Mnemosyne\Desktop\JRT.txt
2013-12-07 23:46 - 2013-12-07 23:46 - 00001340 _____ C:\Users\Mnemosyne\Desktop\AdwCleaner[S1].txt
2013-12-07 23:43 - 2013-09-04 14:49 - 00000000 ____D C:\AdwCleaner
2013-12-07 23:39 - 2013-12-07 23:39 - 01110034 _____ C:\Users\Mnemosyne\Desktop\adwcleaner.exe
2013-12-07 23:39 - 2013-12-07 23:39 - 01034531 _____ (Thisisu) C:\Users\Mnemosyne\Desktop\JRT.exe
2013-12-07 00:04 - 2013-12-06 23:52 - 00000000 ____D C:\Users\Mnemosyne\Desktop\mbar
2013-12-07 00:04 - 2013-12-06 23:50 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-07 00:01 - 2013-12-06 23:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-06 23:53 - 2013-12-06 23:53 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-06 23:51 - 2013-12-06 23:47 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Mnemosyne\Desktop\mbar-1.07.0.1007.exe
2013-12-06 19:33 - 2013-09-06 19:11 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 19:33 - 2013-09-06 19:11 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 16:45 - 2013-09-02 21:48 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-02 20:42 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA
2013-12-02 20:41 - 2013-11-19 19:51 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\NVIDIA Corporation
2013-12-02 20:41 - 2012-07-07 16:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-02 20:40 - 2012-01-16 16:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-29 17:56 - 2013-10-28 21:27 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-10-28 21:27 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-20 23:49 - 2012-04-14 10:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-20 23:49 - 2012-01-16 20:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 23:49 - 2012-01-16 17:31 - 00000000 ____D C:\Users\Mnemosyne\AppData\Local\Adobe
2013-11-17 18:48 - 2013-09-06 19:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 20:02 - 2011-04-12 08:43 - 00696848 _____ C:\Windows\system32\perfh007.dat
2013-11-16 20:02 - 2011-04-12 08:43 - 00148144 _____ C:\Windows\system32\perfc007.dat
2013-11-16 20:02 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-16 17:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 15:52 - 2012-01-16 12:35 - 00001421 _____ C:\Users\Mnemosyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 15:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 01:20 - 2013-11-16 01:15 - 00009961 _____ C:\Windows\IE11_main.log
2013-11-16 01:16 - 2013-11-16 01:16 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-16 01:16 - 2013-11-16 01:16 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-16 01:16 - 2013-11-16 01:16 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-16 01:16 - 2013-11-16 01:16 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-16 01:16 - 2013-11-16 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-16 01:16 - 2013-11-16 01:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-16 01:16 - 2013-11-16 01:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-16 01:16 - 2013-11-16 01:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 22:05 - 2013-08-14 23:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 22:03 - 2012-01-27 12:55 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 12:56 - 2013-11-19 20:05 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-19 20:05 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-19 20:05 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2013-05-23 17:18 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-07-07 16:43 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-11 16:02 - 2012-07-07 16:44 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-07-07 16:44 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-07-07 16:44 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-07-07 16:44 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-07-07 16:44 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-09 22:13 - 2012-01-16 14:20 - 00000000 ____D C:\Users\Mnemosyne\.gimp-2.6
2013-11-09 22:12 - 2013-11-09 22:12 - 00000900 _____ C:\Users\Mnemosyne\.recently-used.xbel
2013-11-09 20:14 - 2013-11-09 20:14 - 00523537 _____ C:\Users\Mnemosyne\Downloads\earthy_tones_photoshop_action_by_lieveheersbeestje-d6t95kh.zip
2013-11-09 18:25 - 2013-09-03 20:38 - 00000000 ____D C:\Windows\erdnt
2013-11-08 23:30 - 2010-11-21 04:47 - 00250144 _____ C:\Windows\PFRO.log
2013-11-08 23:26 - 2013-11-08 23:26 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-08 23:26 - 2013-09-02 21:48 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-08 23:26 - 2013-09-02 21:48 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-08 23:26 - 2013-09-02 21:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

Some content of TEMP:
====================
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 02:14

==================== End Of Log ============================
--- --- ---



und Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 02
Ran by Mnemosyne at 2013-12-08 20:59:25
Running from C:\Users\Mnemosyne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Community Help (x32 Version: 3.0.0)
Adobe Community Help (x32 Version: 3.0.0.400)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Media Player (x32 Version: 1.8)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
ArtRage Studio Pro (x32 Version: 3.5.5)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.8.0)
avast! Free Antivirus (x32 Version: 9.0.2007)
Bamboo (Version: 5.2.5-5)
Bamboo Dock (x32 Version: 4.0)
Bamboo Dock (x32 Version: 4.0.0)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (x32)
Benutzerhandbuch EPSON XP-402 403 405 406 Series (x32)
BioShock (x32 Version: 2.62.0000)
CCleaner (Version: 4.00)
Corel Painter Essentials 4 (x32 Version: 4.0)
Corel Painter Essentials 4 (x32)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Die Sims™ 3 (x32 Version: 1.50.56)
Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.0.55)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.0.44)
Die Sims™ 3 Late Night (x32 Version: 6.0.81)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86)
Die Sims™ 3 Showtime (x32 Version: 12.0.273)
Die Sims™ 3 Stadt-Accessoires (x32 Version: 9.0.73)
Die Sims™ 3 Supernatural (x32 Version: 15.0.135)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)
Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84)
Download Navigator (x32 Version: 3.4.1)
Epson Easy Photo Print 2 (x32 Version: 2.3.2.0)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000)
Epson Event Manager (x32 Version: 3.01.0000)
EPSON Scan (x32)
EPSON XP-402 403 405 406 Series Printer Uninstall
EpsonNet Print (x32 Version: 2.5.00)
FileZilla Client 3.7.1 (x32 Version: 3.7.1)
Free Studio version 2013 (x32 Version: 6.1.10.812)
Free YouTube to MP3 Converter version 3.12.13.925 (x32 Version: 3.12.13.925)
GeForce Experience NvStream Client Components (Version: 1.6.28)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
Guard.ICQ (x32)
ICQ7.7 (x32 Version: 7.7)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 37 (x32 Version: 6.0.370)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (x32)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
Origin (x32 Version: 8.6.0.357)
Pharao (x32)
PreReq (x32 Version: 6.2.4.0)
PxMergeModule (x32 Version: 1.00.0000)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526)
SHIELD Streaming (Version: 1.6.75)
Skype™ 6.7 (x32 Version: 6.7.102)
Tomb Raider: Anniversary 1.0 (x32)
Torchlight (x32 Version: 1.0.0)
Torchlight German Patch (x32 Version: 1.0.0)
Trillian (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Vampire - The Masquerade Bloodlines (x32 Version: 1.00.0000)
WebTablet FB Plugin (x32 Version: 2.0.0.1)
WebTablet IE Plugin (x32 Version: 1.1.0.12)
WebTablet Netscape Plugin (x32 Version: 1.1.0.10)
WinRAR 5.00 (32-bit) (x32 Version: 5.00.0)

==================== Restore Points  =========================

12-11-2013 17:15:20 Windows Update
14-11-2013 21:03:10 Windows Update
16-11-2013 00:15:09 Windows Update
19-11-2013 17:19:52 Windows Update
26-11-2013 17:47:50 Windows Update
29-11-2013 18:49:35 Windows Update
03-12-2013 17:14:53 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-09-25 16:31 - 00000087 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com


==================== Scheduled Tasks (whitelisted) =============

Task: {13FC3A88-7DB7-4368-B97C-59876077766E} - System32\Tasks\{DA334DD2-F63B-4BFF-98BC-652B20E08EAE} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {1FE9BC8A-B82E-4C9A-977C-15CEAE7A4379} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {2870937E-9F74-4FB6-A960-9F1774955BE4} - System32\Tasks\{94DC0BFC-3DDF-4485-8A41-928717CB26B5} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2AF75043-1A8F-4E9C-890B-F86CCC262A72} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {2D6574E5-2809-4968-9CB4-63015EF18A50} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-08] (AVAST Software)
Task: {2F6FB4DD-89C4-488E-862F-FC1E3E8629A5} - System32\Tasks\{9ADDDA80-C99D-4140-8EF6-C2300E814D65} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {2F912C6B-2D26-4C28-BC90-960140EC2F38} - System32\Tasks\{A8B94B43-3AB6-482A-80A3-EF19837CBFC1} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {4DAF3558-3F38-4835-AEF6-EF5D4CD10783} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {59453F9F-DF7C-47AD-BB46-AD56D4939C8B} - System32\Tasks\{90EA3B56-34E7-41DA-8643-B1930CB603BF} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {66A342F1-7522-45FF-A6BF-8DEC2C1EC580} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-06] (Google Inc.)
Task: {7CDC7AAA-F4DC-45D6-BFB9-80ACDF39F403} - System32\Tasks\{5C6BEA30-BB2C-424D-815F-F56FF02E2B15} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {7D979323-F5CB-4071-A776-EF5FB2A9F2C6} - System32\Tasks\{73BC9927-174E-4BC5-89F5-56691C32E054} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {8A756D2A-D6A6-4B50-A5F3-46B086270BA5} - System32\Tasks\{FCA1AD46-06F7-4EFB-829F-1BC8CEDADD2C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {AFAFE870-B53A-49C9-B77A-54064D7FC68D} - System32\Tasks\{EA7371E2-7B04-48A6-B738-A4B39C9BD90C} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B314C6F0-CB1D-4128-878D-4BF75D1AD8B2} - System32\Tasks\{000B787D-91A3-4DEA-82FA-7349F8A14AEC} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B854BDDB-0E12-4413-A68E-CE9E674F1D60} - System32\Tasks\{EEB23FCA-527B-4134-ADB3-0ADA9FDE56B9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {B9ACFBF8-209B-4268-9F38-D1222C763C65} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10] (Microsoft Corporation)
Task: {C8735AE6-6299-4B85-8889-F24410DA4E7F} - System32\Tasks\{AB3ACEF7-9979-42DF-9738-86F85AFEBADA} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {C970EC5F-B82D-4E6D-98F8-66F76C7D1067} - System32\Tasks\{927108AD-90E8-4CB0-A338-5237650BF34F} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {D156A29F-F835-459E-AA35-2EF899C5312D} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {E4450A27-FBA1-4B1D-B454-72228607C10A} - System32\Tasks\{62377DDD-9C63-42A7-9F2D-CB05CEF89C44} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {EA0C451A-4DB4-4967-B5FF-E37CBE1E44AB} - System32\Tasks\{140B5FA2-D27D-480E-992D-C53FE5F93BB7} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: {ED2D3459-AD4C-4CF5-9B00-F1695EE29476} - System32\Tasks\{0456133A-8D2D-49DD-952A-9735284B27FA} => C:\Program Files (x86)\Electronic Arts\Die Sims 3 Showtime\Game\Bin\Sims3Launcher.exe [2012-02-02] (Electronic Arts, Inc.)
Task: {FF064ADE-20FF-42BF-AD35-0E543037AE6F} - System32\Tasks\{8C92DE5D-2545-46AF-BD0D-F1ECE35C18A9} => C:\Program Files (x86)\2K Games\BioShock\Builds\Release\Bioshock.exe [2007-11-14] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-01-25 17:19 - 2011-09-08 16:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-12-08 18:26 - 2013-12-08 10:40 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120800\algo.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-10-20 23:00 - 2013-10-20 23:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00002048 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\toolkit.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00007168 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\events.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00009728 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\buddy.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 00006144 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\talk.dll
2012-05-02 10:40 - 2012-05-02 10:40 - 00005120 _____ () C:\Users\Mnemosyne\AppData\Roaming\Trillian\languages\de\trillian.dll
2013-10-21 11:26 - 2013-10-21 11:26 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-16 16:09 - 2013-11-16 16:09 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-11-16 15:57 - 2013-11-16 15:57 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\Lokale Einstellungen:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:0zUuo0srd22m21Q64bs
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Anwendungsdaten:Uwg7v3jj8k1VEsDMfweUhnHGP27
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\R7lzU9Yx11:GRVHpujCk2u38rAe8
AlternateDataStreams: C:\Users\Mnemosyne\AppData\Local\Temp:1Th6C9jBklNwTNamyZdBQfE6VLab0g

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/08/2013 07:17:34 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/08/2013 06:25:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 03:21:15 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (12/08/2013 07:17:34 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/08/2013 06:25:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2013 03:21:15 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


CodeIntegrity Errors:
===================================
  Date: 2013-09-03 22:13:15.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-03 22:13:15.281
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-01 00:51:56.227
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:56.080
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.933
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.749
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.614
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:51:55.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.591
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-01 00:39:25.456
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 8154.44 MB
Available physical RAM: 5718.19 MB
Total Pagefile: 16307.06 MB
Available Pagefile: 13896.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:530.79 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (CS5 Master Coll1) (CDROM) (Total:7.01 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E87C0DFF)
Partition 1: (Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Alt 08.12.2013, 21:26   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.12.2013, 21:33   #15
CoffinCutie
 
Win32:Fareit-LM [Trj] - Standard

Win32:Fareit-LM [Trj]


Hier der Fixlog

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-12-2013 02
Ran by Mnemosyne at 2013-12-08 21:29:36 Run:2
Running from C:\Users\Mnemosyne\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager" => File/Directory not found.
C:\Users\Mnemosyne\AppData\Local\Temp\nv3DVStreaming.dll => Moved successfully.
C:\Users\Mnemosyne\AppData\Local\Temp\nvSCPAPI.dll => Moved successfully.
C:\Users\Mnemosyne\AppData\Local\Temp\nvStereoApiI.dll => Moved successfully.
C:\Users\Mnemosyne\AppData\Local\Temp\nvStInst.exe => Moved successfully.
C:\Users\Mnemosyne\AppData\Local\Temp\Quarantine.exe => Moved successfully.

==== End of Fixlog ====

mir wird immer wieder erzählt das es ein sehr neuer Trojaner sei, der Sachen von Google Chrome auspioniert und dauch darüber verbreitet, wird.
Da ich FireFox nutze und Chrome nur als "reserve" installiert hab, die ich nie nutze, wolte ich fragen wie viel Funken Wahrheit dahinter steckt.
Ist er sehr neu?
Das er nicht nur über Google Chrome zu kommen scheint, hab ich ja selbst gemerkt.

Antwort
Seite 1 von 2 1 2

Themen zu Win32:Fareit-LM [Trj]
adresse, ahnung, bli, blinkt, board, englisch, false, false positive, fenster, gestoppt, hoffe, letzer, leute, minute, minuten, natürlich, problem, seite, spiel, troja, trojaner, trojaner board, verrückt, win, win32


« Nation Zoom wird von Emisoft Antimalware nicht entdeckt | Avira 7 versteckte Objekte und Hinweise »


Ähnliche Themen: Win32:Fareit-LM [Trj]


  1. Win32:Malware-gen, Win32:Adware-gen, Win32:rookit-gen können nicht gelöscht werden
    Log-Analyse und Auswertung - 17.11.2015 (16)
  2. Windows Vista. Avira findet TR/Fareit.A.686
    Log-Analyse und Auswertung - 17.03.2015 (11)
  3. Win32:Malware-gen und Trojan.Win32.WinloadSDA.dewcdw und PUA.Win32.Packer.Upx-28 - falsch positive Meldungen?
    Plagegeister aller Art und deren Bekämpfung - 20.09.2014 (1)
  4. TR/PSW.Fareit.C.5420 von Avira gefunden
    Plagegeister aller Art und deren Bekämpfung - 27.08.2013 (9)
  5. Trojaner Zbot/ZbotR + TR/PSW.Fareit + Yontoo.Gen + TR/Agent.kdz u.a.
    Plagegeister aller Art und deren Bekämpfung - 11.06.2013 (28)
  6. Rogue:Win32/Winwebsec, PWS:Win32/Fareit, Exploit:Java/CVE-2013-2423 gefunden und entfernt. Was nun?
    Log-Analyse und Auswertung - 09.06.2013 (19)
  7. Unbekanntes Programm: Prozess iftutilx.exe gestoppt – von MSE geblockt CVE-2012-1723.gen + PWS:Win32/Fareit
    Plagegeister aller Art und deren Bekämpfung - 15.04.2013 (18)
  8. Infektion durch Trojan.Agent.ED, EXP/2012-1723.GE, TR/PSW.Fareit.1142 und weitere Malware
    Plagegeister aller Art und deren Bekämpfung - 19.03.2013 (35)
  9. habe mir tr/agent.kl.25088 , tr/atraps.gen und bos/zeroAccess.gen und tr/psw.fareit.587 eingefangen (trojaner ? )
    Plagegeister aller Art und deren Bekämpfung - 03.02.2013 (15)
  10. PSV.Fareit.H.174 von Avira gemeldet
    Plagegeister aller Art und deren Bekämpfung - 24.01.2013 (15)
  11. PWS:Win32/Fareit.gen!A
    Plagegeister aller Art und deren Bekämpfung - 20.09.2012 (14)
  12. MSE: Sirefef, Necurs, Fareit und CVE-2012-1723
    Log-Analyse und Auswertung - 13.09.2012 (14)
  13. "Win32/Fareit.gen!A" wird gefunden
    Plagegeister aller Art und deren Bekämpfung - 29.06.2012 (1)
  14. Sirefef und Fareit löschen (verstecken?) Dateien; System unbrauchbar
    Plagegeister aller Art und deren Bekämpfung - 25.01.2012 (10)
  15. Trojan:Win32/Alureon.FL | PWS:Win32/Fareit.A | Trojan:Win32/Sirefef.P....Auch MBR infiziert?
    Plagegeister aller Art und deren Bekämpfung - 06.01.2012 (7)
  16. TR/Crypt.XPACK.Gen5, TR/Crypt.ZPACK.Gen2, TR/Fake.Rean.3394, TR/PSW.Fareit.A.64
    Plagegeister aller Art und deren Bekämpfung - 19.12.2011 (30)
  17. Win32/Provis!rts, Win32/Ragterneb.A, Win32/Meredrop, Win32/VB.RC, TrojanDropper:Win32/Bamital.C
    Plagegeister aller Art und deren Bekämpfung - 30.08.2010 (7)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Win32:Fareit-LM [Trj] - Hallo liebes Trojaner Board, lang ist es ja nun doch (leider) noch nicht her. Ich hab keine Ahnung was bei mir in letzer Zeit los ist. Avast spielt im Moment - Win32:Fareit-LM [Trj]...
Archiv
Du betrachtest: Win32:Fareit-LM [Trj] auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129