Trojaner-Board - Virus & Co. oder liegt es an mir?

Hallo Schrauber, danke für deine Nachricht.
Hier das neue FRST-Log:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013

Ran by Standard (administrator) on 28-08-2013 23:13:13

Running from C:\Users\Standard\Downloads

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

() C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe

() C:\ProgramData\ERUNT\srvany.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe

(Uwe Sieber - Uwe Sieber's Homepage) C:\Program Files\USBDLM\USBDLM.exe

(Adobe Systems, Inc.) C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe

(Uwe Sieber - Uwe Sieber's Homepage) C:\Program Files\USBDLM\USBDLM_usr.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)

HKCU\...\Run: [AdobeBridge] - C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe [12002664 2011-06-09] (Adobe Systems, Inc.)

HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)

MountPoints2: {0c4ef0c0-e0ad-11e2-a23d-08606e71e251} - F:\LaunchU3.exe -a

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {FC0D2C6D-3ED3-4B87-B2B1-2AAF34BE9280} URL = hxxp://www.google.de/search?q={searchTerms}

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File

Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Standard\AppData\Roaming\Mozilla\Firefox\Path=Profiles\default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
 

==================== Services (Whitelisted) =================
 

R2 BotkindSyncService; C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe [182784 2013-04-11] ()

R2 ERUNT; C:\ProgramData\ERUNT\srvany.exe [13312 2001-03-20] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)

R2 USBDLM; C:\Program Files\USBDLM\USBDLM.exe [451560 2012-09-09] (Uwe Sieber - Uwe Sieber's Homepage)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\ENG64.SYS [126040 2013-07-01] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\ENG64.SYS [126040 2013-07-01] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\EX64.SYS [2098776 2013-07-01] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\EX64.SYS [2098776 2013-07-01] (Symantec Corporation)

R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)

R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [43680 2013-03-05] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)

S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-17 17:53 - 2013-08-17 17:53 - 00891115 _____ C:\Users\Standard\Desktop\SecurityCheck.exe

2013-08-17 16:45 - 2013-08-17 18:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-16 10:04 - 2013-08-16 10:04 - 00000000 ____D C:\Windows\ERUNT

2013-08-16 10:03 - 2013-08-16 10:03 - 01159319 _____ (Thisisu) C:\Users\Standard\Desktop\JRT.exe

2013-08-16 09:52 - 2013-08-16 09:52 - 00015203 _____ C:\AdwCleaner[S1].txt

2013-08-16 09:49 - 2013-08-16 09:49 - 00666633 _____ C:\Users\Standard\Desktop\adwcleaner.exe

2013-08-16 09:35 - 2013-08-16 09:35 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Malwarebytes

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-16 09:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-08-16 09:32 - 2013-08-16 09:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Standard\Desktop\mbam-setup-1.75.0.1300.exe

2013-08-15 19:27 - 2013-08-15 19:27 - 00000000 ____D C:\FRST

2013-08-15 19:25 - 2013-08-15 19:25 - 01575570 _____ (Farbar) C:\Users\Standard\Desktop\FRST64.exe

2013-08-14 15:17 - 2013-08-27 22:59 - 00000000 ____D C:\Users\Standard\Desktop\Export Hochzeit

2013-08-14 01:45 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-14 01:45 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-14 01:45 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-08-14 01:45 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-14 01:45 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-08-14 01:45 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-14 01:45 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-08-14 01:45 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-08-14 01:45 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-08-14 01:45 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-08-14 01:45 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-08-14 01:45 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-08-14 01:45 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-08-14 01:45 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-08-14 01:43 - 2013-08-14 01:44 - 00000000 ____D C:\Windows\system32\MRT

2013-08-13 19:20 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-13 19:20 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-13 19:20 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-13 19:20 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-08-13 19:20 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-13 19:20 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-13 19:20 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-08-13 19:20 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-13 19:20 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-13 19:20 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-13 19:20 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-13 19:20 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-13 19:20 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-13 19:20 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-13 19:20 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-08-13 19:20 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-08-13 19:20 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-08-13 19:20 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-08-13 19:20 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-08-13 19:20 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-08-13 19:20 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-08-13 19:20 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-08-13 19:20 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-08-13 19:20 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-08-13 19:20 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-08-13 19:20 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-13 19:20 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-05 00:30 - 2013-08-05 00:30 - 00000000 ____D C:\Users\Standard\Documents\Neuer Ordner

2013-07-31 22:02 - 2013-07-31 22:02 - 00000814 _____ C:\Users\Standard\Desktop\Export neu - Verknüpfung.lnk

2013-07-30 00:19 - 2013-07-31 22:46 - 00001031 _____ C:\Users\Standard\Desktop\PhotoScape.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-08-28 23:11 - 2013-08-28 23:11 - 01579080 _____ (Farbar) C:\Users\Standard\Downloads\FRST64.exe

2013-08-28 22:55 - 2013-05-20 14:38 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-28 22:53 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-28 22:53 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-28 22:50 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat

2013-08-28 22:50 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat

2013-08-28 22:50 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-28 22:49 - 2013-04-16 14:07 - 02022870 _____ C:\Windows\WindowsUpdate.log

2013-08-28 22:46 - 2013-05-20 14:44 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Skype

2013-08-28 22:46 - 2013-05-20 14:38 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-28 22:46 - 2013-04-16 15:35 - 00000000 ____D C:\ProgramData\NVIDIA

2013-08-28 22:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-28 22:46 - 2009-07-14 06:51 - 00039733 _____ C:\Windows\setupact.log

2013-08-27 22:59 - 2013-08-14 15:17 - 00000000 ____D C:\Users\Standard\Desktop\Export Hochzeit

2013-08-19 10:51 - 2013-05-20 22:22 - 00000000 ____D C:\Users\Standard\Desktop\Export neu

2013-08-18 23:57 - 2013-05-20 14:17 - 00001456 _____ C:\Users\Standard\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2013-08-18 17:47 - 2013-05-08 13:04 - 00000710 _____ C:\Users\Standard\SciTE.session

2013-08-18 00:27 - 2013-04-16 16:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-18 00:27 - 2010-11-21 05:47 - 00020372 _____ C:\Windows\PFRO.log

2013-08-17 18:06 - 2013-08-17 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-08-17 17:53 - 2013-08-17 17:53 - 00891115 _____ C:\Users\Standard\Desktop\SecurityCheck.exe

2013-08-16 12:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-08-16 10:04 - 2013-08-16 10:04 - 00000000 ____D C:\Windows\ERUNT

2013-08-16 10:03 - 2013-08-16 10:03 - 01159319 _____ (Thisisu) C:\Users\Standard\Desktop\JRT.exe

2013-08-16 09:52 - 2013-08-16 09:52 - 00015203 _____ C:\AdwCleaner[S1].txt

2013-08-16 09:49 - 2013-08-16 09:49 - 00666633 _____ C:\Users\Standard\Desktop\adwcleaner.exe

2013-08-16 09:35 - 2013-08-16 09:35 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Malwarebytes

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-16 09:32 - 2013-08-16 09:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Standard\Desktop\mbam-setup-1.75.0.1300.exe

2013-08-15 19:27 - 2013-08-15 19:27 - 00000000 ____D C:\FRST

2013-08-15 19:25 - 2013-08-15 19:25 - 01575570 _____ (Farbar) C:\Users\Standard\Desktop\FRST64.exe

2013-08-15 18:21 - 2013-07-17 23:40 - 00000000 ____D C:\Users\Standard\AppData\Local\NPE

2013-08-14 13:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-14 11:30 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-14 01:44 - 2013-08-14 01:43 - 00000000 ____D C:\Windows\system32\MRT

2013-08-14 01:43 - 2013-04-16 16:43 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-05 18:02 - 2013-05-25 16:12 - 00000000 ____D C:\Users\Standard\Documents\Dokumente Fotografie

2013-08-05 00:30 - 2013-08-05 00:30 - 00000000 ____D C:\Users\Standard\Documents\Neuer Ordner

2013-07-31 22:46 - 2013-07-30 00:19 - 00001031 _____ C:\Users\Standard\Desktop\PhotoScape.lnk

2013-07-31 22:44 - 2013-05-20 14:38 - 00000000 ____D C:\Users\Standard\AppData\Roaming\PhotoScape

2013-07-31 22:02 - 2013-07-31 22:02 - 00000814 _____ C:\Users\Standard\Desktop\Export neu - Verknüpfung.lnk
 

Files to move or delete:

====================

C:\Users\Standard\AppData\Local\Temp\bi_cleaner.exe

C:\Users\Standard\AppData\Local\Temp\FoxyDeal.exe

C:\Users\Standard\AppData\Local\Temp\FoxyDeal_Setup.exe

C:\Users\Standard\AppData\Local\Temp\nvStInst.exe

C:\Users\Standard\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Standard\AppData\Local\Temp\uninst1.exe

C:\Users\Standard\AppData\Local\Temp\_isC3AB.exe

C:\Users\Standard\AppData\Local\Temp\{D1616665-23E4-46AB-9D95-254B14F5BE62}\InstallFlashPlayer.exe

C:\Users\Standard\AppData\Local\Temp\{868D6BDD-D317-4F5B-AA22-1AA90EBB35D4}\ISSetup.dll

C:\Users\Standard\AppData\Local\Temp\{868D6BDD-D317-4F5B-AA22-1AA90EBB35D4}\_Setup.dll

C:\Users\Standard\AppData\Local\Temp\{42EF2E44-25DE-42E6-93CB-419C76FAB65D}\setup.exe

C:\Users\Standard\AppData\Local\Temp\{2B76B5C9-A26D-41C3-8531-53E2D3E0ECC4}\{F1A6C690-C12C-4E7A-B4BD-958678215418}\dotNetFx40_Client_x86_x64.exe

C:\Users\Standard\AppData\Local\Temp\{2B76B5C9-A26D-41C3-8531-53E2D3E0ECC4}\{F1A6C690-C12C-4E7A-B4BD-958678215418}\vcredist_x64.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe

C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe

C:\Users\Standard\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BExternal.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BUSolForMontiera.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BUSolution.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\ChromeToolbarSetup.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\CrxInstaller.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\GUninstaller.exe

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\IEHelper.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\MntrDLLInstall.dll

C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\sqlite3.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\GoogleEarth.exe

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemyext.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\earthps.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\geplugin.exe

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\ge_expat.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\googleearth_free.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\icudt.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGCore.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGExportCommon.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGMath.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGOpt.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGSg.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGUtils.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\Leap.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\msvcp100.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\msvcr100.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\npgeplugin.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\plugin_ax.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtCore4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtGui4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtNetwork4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtWebKit4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemyext.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\earthflashsol.exe

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\earthps.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\ge_expat.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\googleearth.exe

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\googleearth_free.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\gpsbabel.exe

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\icudt.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGCore.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGExportCommon.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGMath.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGOpt.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGSg.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGUtils.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\Leap.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\msvcp100.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\msvcr100.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtCore4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtGui4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtNetwork4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtWebKit4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\imageformats\qgif4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\imageformats\qjpeg4.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\optimizations\IGOptExtension.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\D3DCompiler_43.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\d3dx9_43.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGSg.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\libEGL.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\libGLESv2.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGAttrs.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGGfx.dll

C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGSg.dll
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit
 
 
 
 
 

[YOUTUBE]C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-26 13:47
 

==================== End Of Log ============================
--- --- ---

--- --- ---