Firefox-Fehler: Proxy-Server verweigert die Verbindung

# AdwCleaner v3.016 - Bericht erstellt am 30/12/2013 um 18:38:34
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Dennis - DENNIS
# Gestartet von : C:\Users\Dennis\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : hshld
[#] Dienst Gelöscht : hsstrayservice
Dienst Gelöscht : hsswd

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\hotspot shield
Ordner Gelöscht : C:\ProgramData\Trymedia
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield
Ordner Gelöscht : C:\Program Files (x86)\hotspot shield
Ordner Gelöscht : C:\Windows\SysWOW64\hotspot shield
Ordner Gelöscht : C:\Users\Dennis\AppData\LocalLow\facemoods.com
Ordner Gelöscht : C:\Users\Dennis\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com
Datei Gelöscht : C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\searchplugins\safesearch.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\anchorfree
Schlüssel Gelöscht : HKCU\Software\FLEXnet
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\hotspotshield
Schlüssel Gelöscht : HKLM\Software\Trymedia Systems
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16750


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.facemoods.aflt", "_#ddrnw");
Zeile gelöscht : user_pref("extensions.facemoods.firstRun", false);
Zeile gelöscht : user_pref("extensions.facemoods.lastActv", "12");

*************************

AdwCleaner[R0].txt - [4439 octets] - [30/12/2013 18:35:54]
AdwCleaner[S0].txt - [4197 octets] - [30/12/2013 18:38:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4257 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x64
Ran by Dennis on 30.12.2013 at 18:45:46,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{3EF621F8-33C4-4C03-BEBB-32A4919A62C0}
Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{AF3D2F03-281E-4544-AA05-A97351122D51}
Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{C5E55DBE-ACE2-4534-B0B9-1305B9557B9D}
Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{C8A12CB1-2B5A-4069-A2C3-72B6F4440854}
Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{D8A0A3DB-F0EB-473D-A963-D7CA9E43633D}
Successfully deleted: [Empty Folder] C:\Users\Dennis\appdata\local\{EBB527CC-D13A-4CBF-A940-299E4D707E61}



~~~ FireFox

Emptied folder: C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\8xv9nmj8.default\minidumps [57 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.12.2013 at 18:53:30,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by Dennis (administrator) on DENNIS on 30-12-2013 18:56:07
Running from C:\Users\Dennis\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(www.motioninjoy.com) C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe
(Spotify Ltd) C:\Users\Dennis\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2012-04-20] (TomTom)
HKCU\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [110352 2011-01-01] (www.motioninjoy.com)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Dennis\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-05] (Spotify Ltd)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: F - F:\autorun.exe
MountPoints2: {0b19ea2d-cccb-11e1-a8d2-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {0b19ea57-cccb-11e1-a8d2-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {0b19ea62-cccb-11e1-a8d2-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {0b19ea75-cccb-11e1-a8d2-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {0b19ea88-cccb-11e1-a8d2-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {0b19eaa0-cccb-11e1-a8d2-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {0b19eaae-cccb-11e1-a8d2-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {0b19eab8-cccb-11e1-a8d2-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {1234698f-8627-11e0-b3e8-00235a89b95a} - F:\autorun.exe
MountPoints2: {20e4c9d4-cc45-11e1-a166-806e6f6e6963} - G:\AutoRun.exe
MountPoints2: {4528c230-f82b-11e0-99c8-00235a89b95a} - F:\Setup.exe
MountPoints2: {63dce1f7-2a75-11e1-aeb5-00235a89b95a} - G:\Startme.exe
MountPoints2: {66ea9a4a-cc48-11e1-ab3f-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {66ea9a56-cc48-11e1-ab3f-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {66ea9a6f-cc48-11e1-ab3f-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {66ea9a91-cc48-11e1-ab3f-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {66ea9af1-cc48-11e1-ab3f-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {bd579e1d-cc3e-11e1-a6ce-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {bd579e59-cc3e-11e1-a6ce-00235a89b95a} - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {c2192be7-cc46-11e1-ab1a-00235a89b95a} - G:\AutoRun.exe
MountPoints2: {c2192c08-cc46-11e1-ab1a-00235a89b95a} - G:\AutoRun.exe
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7A2A6E645E29CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\ipsbho.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
DPF: HKLM-x32 {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Monopoly/Images/stg_drm.ocx
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
DPF: HKLM-x32 {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Monopoly/Images/armhelper.ocx
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\2020Player_IKEA@2020Technologies.com
FF Extension: ProxTube - Unblock YouTube - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\ich@maltegoetz.de
FF Extension: DownloadHelper - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Tile Tabs - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\tiletabs@DW-dev.xpi
FF Extension: Bulk Image Downloader - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\{524B8EF8-C312-11DB-8039-536F56D89593}.xpi
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\8xv9nmj8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\

==================== Services (Whitelisted) =================

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-09-26] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [271424 2011-10-16] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-20] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-20] (Symantec Corporation)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2013-11-13] (AnchorFree Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20131227.001\IDSvia64.sys [521944 2013-12-19] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20131229.021\ENG64.SYS [126040 2013-12-20] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20131229.021\EX64.SYS [2099288 2013-12-20] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-20] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.)
R3 TotRec8; C:\Windows\system32\drivers\TotRec8.sys [124176 2012-11-30] (High Criteria inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 18:53 - 2013-12-30 18:53 - 00001403 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-12-30 18:45 - 2013-12-30 18:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-30 18:34 - 2013-12-30 18:34 - 01034531 _____ (Thisisu) C:\Users\Dennis\Desktop\JRT.exe
2013-12-30 18:32 - 2013-12-30 18:38 - 00000000 ____D C:\AdwCleaner
2013-12-30 18:32 - 2013-12-30 18:32 - 01233962 _____ C:\Users\Dennis\Desktop\adwcleaner.exe
2013-12-27 18:10 - 2013-12-27 18:10 - 00000000 ____D C:\Users\Dennis\AppData\Local\Apple Computer
2013-12-27 15:05 - 2013-12-27 15:05 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-27 15:05 - 2013-12-27 15:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-12-25 18:30 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-25 18:30 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-25 18:30 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-25 18:30 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-25 18:29 - 2013-12-25 18:30 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-22 14:36 - 2013-12-25 18:31 - 00000000 ____D C:\ProgramData\Oracle
2013-12-22 14:36 - 2013-12-22 14:35 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-22 14:35 - 2013-12-22 14:35 - 00000000 ____D C:\Program Files\Java
2013-12-22 14:33 - 2013-12-22 14:34 - 30694824 _____ (Oracle Corporation) C:\Users\Dennis\Downloads\jre-7u45-windows-x64.exe
2013-12-21 10:31 - 2013-12-21 10:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-21 09:54 - 2013-12-21 11:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-21 09:54 - 2013-12-21 11:06 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-21 09:54 - 2013-12-21 09:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-21 09:53 - 2013-12-21 11:38 - 00000000 ____D C:\Users\Dennis\Desktop\mbar
2013-12-21 09:53 - 2013-12-21 11:06 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-21 09:50 - 2013-12-21 09:51 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Dennis\Downloads\mbar-1.07.0.1008.exe
2013-12-20 21:37 - 2013-12-21 11:01 - 00000000 ____D C:\Users\Dennis\AppData\Local\NPE
2013-12-20 21:25 - 2013-12-20 21:25 - 00000000 ____D C:\Users\Dennis\Downloads\FRST-OlderVersion
2013-12-20 11:35 - 2013-12-20 11:37 - 00055286 _____ C:\Users\Dennis\Desktop\Norton.txt
2013-12-20 11:16 - 2013-12-20 11:01 - 00037087 _____ C:\Users\Dennis\Desktop\FRST.txt
2013-12-20 11:16 - 2013-12-20 11:01 - 00024724 _____ C:\Users\Dennis\Desktop\Addition.txt
2013-12-20 11:16 - 2013-12-20 10:53 - 00000554 _____ C:\Users\Dennis\Desktop\defogger_disable.log
2013-12-20 11:10 - 2013-12-20 11:10 - 00006323 _____ C:\Users\Dennis\Desktop\Gmer.txt
2013-12-20 11:00 - 2013-12-20 11:01 - 00024724 _____ C:\Users\Dennis\Downloads\Addition.txt
2013-12-20 10:55 - 2013-12-30 18:56 - 00017128 _____ C:\Users\Dennis\Downloads\FRST.txt
2013-12-20 10:54 - 2013-12-20 21:25 - 00000000 ____D C:\FRST
2013-12-20 10:53 - 2013-12-20 10:53 - 00000554 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2013-12-20 10:53 - 2013-12-20 10:53 - 00000178 _____ C:\Users\Dennis\defogger_reenable
2013-12-20 10:52 - 2013-12-20 10:52 - 00377856 _____ C:\Users\Dennis\Downloads\gmer_2.1.19163.exe
2013-12-20 10:51 - 2013-12-20 21:25 - 02193141 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe
2013-12-20 10:50 - 2013-12-20 10:50 - 00050477 _____ C:\Users\Dennis\Downloads\Defogger.exe
2013-12-20 10:03 - 2013-12-20 10:03 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-12-20 09:57 - 2013-12-20 09:57 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-12-20 09:57 - 2013-12-20 09:57 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-12-20 09:57 - 2013-12-20 09:57 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-12-20 09:57 - 2013-12-20 09:57 - 00002539 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-12-20 09:57 - 2013-12-20 09:57 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-12-20 09:53 - 2013-12-20 09:53 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-12-20 09:53 - 2013-12-20 09:53 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-12-20 09:41 - 2013-12-20 09:46 - 223165336 ____N (Symantec Corporation) C:\Users\Dennis\Downloads\NIS_21.1.0.18_SYMTB_TMD_MRFTT_820_10131.exe
2013-12-18 10:54 - 2013-12-18 10:55 - 00001511 _____ C:\Users\Dennis\Desktop\OMSI 2 - Verknüpfung.lnk
2013-12-18 08:40 - 2013-12-18 08:40 - 00000000 ____D C:\ProgramData\PCSettings
2013-12-18 08:34 - 2013-12-18 08:34 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-12-15 19:10 - 2013-12-15 19:10 - 00000000 ____D C:\Users\Dennis\AppData\Local\CreationMaster
2013-12-14 21:11 - 2013-12-14 21:13 - 52155552 _____ C:\Users\Dennis\Downloads\blender-2.69-windows64.exe
2013-12-14 14:22 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-14 14:22 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-14 14:22 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-14 14:22 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-14 14:19 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-14 14:19 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-14 14:19 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-14 14:19 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-14 14:19 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-14 14:19 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-14 14:19 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-14 14:19 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-14 14:19 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-14 14:19 - 2013-10-25 04:17 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 14:19 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-14 14:18 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-14 14:18 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-14 14:18 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-14 14:18 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-14 14:18 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 17:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-12 15:38 - 2013-12-25 19:11 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-12 15:18 - 2013-12-30 18:43 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-12 15:18 - 2013-12-12 15:18 - 00000883 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-12 14:59 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 14:59 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 14:59 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 14:59 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 14:59 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 14:59 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 14:59 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 14:59 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 14:59 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 14:59 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 14:59 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 14:59 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 14:59 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 14:59 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 14:59 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 14:59 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 14:59 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 14:59 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 14:59 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 11:17 - 2013-12-10 11:18 - 00000000 ____D C:\Users\Dennis\Documents\MB_O530 - Backup
2013-12-07 21:39 - 2013-11-13 11:49 - 00044744 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
2013-11-30 21:35 - 2013-11-30 21:35 - 00000000 ____D C:\Program Files (x86)\TFM
2013-11-30 11:22 - 2013-11-30 11:22 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\NVIDIA
2013-11-30 10:10 - 2013-12-20 22:18 - 00000000 ____D C:\Users\Dennis\AppData\Local\Spotify
2013-11-30 10:07 - 2013-11-30 10:07 - 00001816 _____ C:\Users\Dennis\Desktop\Spotify.lnk
2013-11-30 10:07 - 2013-11-30 10:07 - 00001802 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-11-30 10:06 - 2013-12-27 16:23 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Spotify
2013-11-30 10:03 - 2013-12-30 06:55 - 00140721 _____ C:\Windows\IE11_main.log

==================== One Month Modified Files and Folders =======

2013-12-30 18:57 - 2013-12-20 10:55 - 00017128 _____ C:\Users\Dennis\Downloads\FRST.txt
2013-12-30 18:53 - 2013-12-30 18:53 - 00001403 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-12-30 18:48 - 2009-07-14 05:45 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-30 18:48 - 2009-07-14 05:45 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 18:45 - 2013-12-30 18:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-30 18:45 - 2011-05-22 15:54 - 01940634 _____ C:\Windows\WindowsUpdate.log
2013-12-30 18:43 - 2013-12-12 15:18 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-30 18:41 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-30 18:41 - 2009-07-14 05:51 - 00124254 _____ C:\Windows\setupact.log
2013-12-30 18:40 - 2011-05-29 22:50 - 01597132 _____ C:\Windows\PFRO.log
2013-12-30 18:38 - 2013-12-30 18:32 - 00000000 ____D C:\AdwCleaner
2013-12-30 18:38 - 2013-06-12 19:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 18:34 - 2013-12-30 18:34 - 01034531 _____ (Thisisu) C:\Users\Dennis\Desktop\JRT.exe
2013-12-30 18:32 - 2013-12-30 18:32 - 01233962 _____ C:\Users\Dennis\Desktop\adwcleaner.exe
2013-12-30 06:55 - 2013-11-30 10:03 - 00140721 _____ C:\Windows\IE11_main.log
2013-12-29 18:40 - 2013-11-15 16:35 - 00000000 ____D C:\Windows\rescache
2013-12-27 18:10 - 2013-12-27 18:10 - 00000000 ____D C:\Users\Dennis\AppData\Local\Apple Computer
2013-12-27 16:23 - 2013-11-30 10:06 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Spotify
2013-12-27 15:05 - 2013-12-27 15:05 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-27 15:05 - 2013-12-27 15:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-12-26 17:46 - 2012-04-26 15:35 - 00000000 ____D C:\Users\Dennis\Documents\EDEKA
2013-12-26 12:05 - 2012-06-23 20:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-25 22:12 - 2013-11-16 22:14 - 00000000 ____D C:\Users\Dennis\Documents\FIFA 14
2013-12-25 19:11 - 2013-12-12 15:38 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-25 18:31 - 2013-12-22 14:36 - 00000000 ____D C:\ProgramData\Oracle
2013-12-25 18:30 - 2013-12-25 18:29 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-25 18:30 - 2013-03-20 21:26 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-22 20:42 - 2013-05-29 20:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\CrashDumps
2013-12-22 14:39 - 2013-06-12 19:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-22 14:39 - 2012-05-04 07:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-22 14:39 - 2012-05-04 07:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-22 14:39 - 2011-05-22 20:05 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-12-22 14:35 - 2013-12-22 14:36 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-22 14:35 - 2013-12-22 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-22 14:35 - 2013-12-22 14:35 - 00000000 ____D C:\Program Files\Java
2013-12-22 14:34 - 2013-12-22 14:33 - 30694824 _____ (Oracle Corporation) C:\Users\Dennis\Downloads\jre-7u45-windows-x64.exe
2013-12-21 11:38 - 2013-12-21 09:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-21 11:38 - 2013-12-21 09:53 - 00000000 ____D C:\Users\Dennis\Desktop\mbar
2013-12-21 11:06 - 2013-12-21 09:54 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-21 11:06 - 2013-12-21 09:53 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-21 11:01 - 2013-12-20 21:37 - 00000000 ____D C:\Users\Dennis\AppData\Local\NPE
2013-12-21 10:31 - 2013-12-21 10:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-21 09:54 - 2013-12-21 09:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-21 09:51 - 2013-12-21 09:50 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Dennis\Downloads\mbar-1.07.0.1008.exe
2013-12-20 22:18 - 2013-11-30 10:10 - 00000000 ____D C:\Users\Dennis\AppData\Local\Spotify
2013-12-20 21:39 - 2013-05-10 08:58 - 00000000 ____D C:\ProgramData\Norton
2013-12-20 21:25 - 2013-12-20 21:25 - 00000000 ____D C:\Users\Dennis\Downloads\FRST-OlderVersion
2013-12-20 21:25 - 2013-12-20 10:54 - 00000000 ____D C:\FRST
2013-12-20 21:25 - 2013-12-20 10:51 - 02193141 _____ (Farbar) C:\Users\Dennis\Downloads\FRST64.exe
2013-12-20 11:37 - 2013-12-20 11:35 - 00055286 _____ C:\Users\Dennis\Desktop\Norton.txt
2013-12-20 11:10 - 2013-12-20 11:10 - 00006323 _____ C:\Users\Dennis\Desktop\Gmer.txt
2013-12-20 11:01 - 2013-12-20 11:16 - 00037087 _____ C:\Users\Dennis\Desktop\FRST.txt
2013-12-20 11:01 - 2013-12-20 11:16 - 00024724 _____ C:\Users\Dennis\Desktop\Addition.txt
2013-12-20 11:01 - 2013-12-20 11:00 - 00024724 _____ C:\Users\Dennis\Downloads\Addition.txt
2013-12-20 10:53 - 2013-12-20 11:16 - 00000554 _____ C:\Users\Dennis\Desktop\defogger_disable.log
2013-12-20 10:53 - 2013-12-20 10:53 - 00000554 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2013-12-20 10:53 - 2013-12-20 10:53 - 00000178 _____ C:\Users\Dennis\defogger_reenable
2013-12-20 10:53 - 2011-05-22 15:58 - 00000000 ____D C:\Users\Dennis
2013-12-20 10:52 - 2013-12-20 10:52 - 00377856 _____ C:\Users\Dennis\Downloads\gmer_2.1.19163.exe
2013-12-20 10:50 - 2013-12-20 10:50 - 00050477 _____ C:\Users\Dennis\Downloads\Defogger.exe
2013-12-20 10:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-20 10:03 - 2013-12-20 10:03 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-12-20 09:57 - 2013-12-20 09:57 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-12-20 09:57 - 2013-12-20 09:57 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-12-20 09:57 - 2013-12-20 09:57 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-12-20 09:57 - 2013-12-20 09:57 - 00002539 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-12-20 09:57 - 2013-12-20 09:57 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-12-20 09:53 - 2013-12-20 09:53 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-12-20 09:53 - 2013-12-20 09:53 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-12-20 09:46 - 2013-12-20 09:41 - 223165336 ____N (Symantec Corporation) C:\Users\Dennis\Downloads\NIS_21.1.0.18_SYMTB_TMD_MRFTT_820_10131.exe
2013-12-18 10:55 - 2013-12-18 10:54 - 00001511 _____ C:\Users\Dennis\Desktop\OMSI 2 - Verknüpfung.lnk
2013-12-18 08:40 - 2013-12-18 08:40 - 00000000 ____D C:\ProgramData\PCSettings
2013-12-18 08:34 - 2013-12-18 08:34 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-12-17 17:04 - 2009-07-14 18:58 - 00707712 _____ C:\Windows\system32\perfh007.dat
2013-12-17 17:04 - 2009-07-14 18:58 - 00153272 _____ C:\Windows\system32\perfc007.dat
2013-12-17 17:04 - 2009-07-14 06:13 - 01642812 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 17:00 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-17 16:58 - 2009-07-14 05:45 - 05099768 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-16 15:27 - 2013-08-14 20:25 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 15:23 - 2011-11-06 20:23 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-15 19:40 - 2011-06-05 16:31 - 00000132 _____ C:\Users\Dennis\AppData\Roaming\Adobe PNG Format CS5 Prefs
2013-12-15 19:10 - 2013-12-15 19:10 - 00000000 ____D C:\Users\Dennis\AppData\Local\CreationMaster
2013-12-15 15:34 - 2012-05-27 13:36 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Audacity
2013-12-14 21:15 - 2012-05-24 10:06 - 00000000 ____D C:\Program Files\Blender Foundation
2013-12-14 21:13 - 2013-12-14 21:11 - 52155552 _____ C:\Users\Dennis\Downloads\blender-2.69-windows64.exe
2013-12-14 14:21 - 2011-05-25 16:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 17:05 - 2011-10-14 20:03 - 00045801 _____ C:\Windows\DirectX.log
2013-12-12 15:18 - 2013-12-12 15:18 - 00000883 _____ C:\Users\Public\Desktop\Steam.lnk
2013-12-10 11:51 - 2011-05-22 15:59 - 00000000 ____D C:\Users\Dennis\AppData\Local\VirtualStore
2013-12-10 11:18 - 2013-12-10 11:17 - 00000000 ____D C:\Users\Dennis\Documents\MB_O530 - Backup
2013-11-30 21:35 - 2013-11-30 21:35 - 00000000 ____D C:\Program Files (x86)\TFM
2013-11-30 11:22 - 2013-11-30 11:22 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\NVIDIA
2013-11-30 10:07 - 2013-11-30 10:07 - 00001816 _____ C:\Users\Dennis\Desktop\Spotify.lnk
2013-11-30 10:07 - 2013-11-30 10:07 - 00001802 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

Some content of TEMP:
====================
C:\Users\Dennis\AppData\Local\Temp\abelssoft.setup.exe
C:\Users\Dennis\AppData\Local\Temp\AutoRun.exe
C:\Users\Dennis\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Dennis\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Dennis\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Dennis\AppData\Local\Temp\eauninstall.exe
C:\Users\Dennis\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Dennis\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Dennis\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\Dennis\AppData\Local\Temp\incredibar_installer.exe
C:\Users\Dennis\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\Dennis\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Dennis\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Dennis\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Dennis\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Dennis\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Dennis\AppData\Local\Temp\mfc80.dll
C:\Users\Dennis\AppData\Local\Temp\mfc80u.dll
C:\Users\Dennis\AppData\Local\Temp\mfcm80.dll
C:\Users\Dennis\AppData\Local\Temp\mfcm80u.dll
C:\Users\Dennis\AppData\Local\Temp\msvcm80.dll
C:\Users\Dennis\AppData\Local\Temp\msvcp80.dll
C:\Users\Dennis\AppData\Local\Temp\msvcr80.dll
C:\Users\Dennis\AppData\Local\Temp\nsisdt.dll
C:\Users\Dennis\AppData\Local\Temp\NVI2_29.DLL
C:\Users\Dennis\AppData\Local\Temp\ose00000.exe
C:\Users\Dennis\AppData\Local\Temp\OSU.exe
C:\Users\Dennis\AppData\Local\Temp\Quarantine.exe
C:\Users\Dennis\AppData\Local\Temp\ResetDevice.exe
C:\Users\Dennis\AppData\Local\Temp\SC4_uninst.exe
C:\Users\Dennis\AppData\Local\Temp\SimCity 4 Deluxe_uninst.exe
C:\Users\Dennis\AppData\Local\Temp\SpOrder.dll
C:\Users\Dennis\AppData\Local\Temp\Uninstaller.exe
C:\Users\Dennis\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Dennis\AppData\Local\Temp\VersionUpdater.exe
C:\Users\Dennis\AppData\Local\Temp\VodafoneUninstall.exe
C:\Users\Dennis\AppData\Local\Temp\WtgDriverInstallX.dll
C:\Users\Dennis\AppData\Local\Temp\WTGXMLUtil.dll
C:\Users\Dennis\AppData\Local\Temp\WtgZip.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-29 18:32

==================== End Of Log ============================