Trojaner-Board - OTL-Fix erstellen?

Sorry. So ich hoffe ich machs richtig ;)

log:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=cd44e98074f509439d590a42a79a37a6

# engine=15679

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-10-29 04:43:24

# local_time=2013-10-29 05:43:24 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=3592 16777213 100 93 25606 133727500 0 0

# compatibility_mode=5892 16776574 100 95 12726487 220597732 0 0

# scanned=182111

# found=0

# cleaned=0

# scan_time=9775

FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013

Ran by wurzer (administrator) on WURZER-PC on 06-11-2013 15:59:13

Running from C:\Users\wurzer\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(HiTRSUT) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

(Acer Inc.) C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNet Service.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

() C:\Acer\Mobility Center\MobilityService.exe

(Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files\CyberLink\Shared Files\RichVideo.exe

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\ehome\ehsched.exe

(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe

(Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at) C:\Program Files\A1 Dashboard\Dashboard.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\mobsync.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Acer Tour] - [x]

HKLM\...\Run: [SetPanel] - [x]

HKLM\...\Run: [eRecoveryService] - [x]

HKLM\...\Run: [] - [x]

HKLM\...\Runonce: [Regsister WScript] - wscript -regserver

HKLM\...\RunOnce: [InnoSetupRegFile.0000000001] - "C:\Windows\is-55349.exe" /REG [663040 2013-11-06] ()

HKCU\...\Run: [Acer Tour Reminder] - [x]

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-19] (Microsoft Corporation)

HKCU\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION 

MountPoints2: G - G:\AutoRun.exe

MountPoints2: {1589c10a-0b9d-11dc-85bb-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {1589c124-0b9d-11dc-85bb-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {2011237b-7b64-11e2-aaad-c33c78b91b4d} - F:\AutoRun.exe

MountPoints2: {25081c78-f53f-11dd-98ec-0016d4d2ec10} - H:\LaunchU3.exe -a

MountPoints2: {314f4a4b-fc91-11e0-9f83-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {314f4a64-fc91-11e0-9f83-001e101f3315} - F:\AutoRun.exe

MountPoints2: {38073ac2-53e6-11e0-bac4-001e101f3315} - F:\AutoRun.exe

MountPoints2: {55c627cc-fd60-11e0-900c-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {55c627e0-fd60-11e0-900c-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {5bca104b-fe15-11e0-980f-001e101f79c9} - F:\AutoRun.exe

MountPoints2: {68b6fa4d-fc83-11e0-9d2c-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {68b6fa5c-fc83-11e0-9d2c-001e101f2b52} - F:\AutoRun.exe

MountPoints2: {7463012f-0e82-11e1-b1ac-001e101f79c9} - F:\AutoRun.exe

MountPoints2: {78b014f9-fe10-11e0-878f-001e101fa1f5} - F:\AutoRun.exe

MountPoints2: {7d240cbc-96bb-11dd-89eb-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {86f526dc-fd65-11e0-849f-001e101f82a7} - F:\AutoRun.exe

MountPoints2: {8c8dc245-0cf6-11dc-a944-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {8c8dc247-0cf6-11dc-a944-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {9a3195c2-4bc5-11e0-9866-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {b21d7905-dd8a-11dd-9083-0016d4d2ec10} - F:\start.exe

MountPoints2: {cc9ccbcc-4b72-11e1-a44e-001e101f1f81} - G:\AutoRun.exe

MountPoints2: {ced9e63c-fe1d-11e0-980c-001e101f1ed9} - F:\AutoRun.exe

MountPoints2: {dfd37a42-4c28-11e0-9ce3-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {dfd37a51-4c28-11e0-9ce3-001e101f2c0e} - F:\AutoRun.exe

MountPoints2: {e736994e-fd62-11e0-8561-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {e7369970-fd62-11e0-8561-001e101f2b52} - G:\AutoRun.exe

MountPoints2: {f4335ae1-4bc7-11e0-b840-001e101f63cf} - F:\AutoRun.exe

MountPoints2: {f97424a3-4c22-11e0-b482-0016d4d2ec10} - F:\AutoRun.exe

MountPoints2: {f97424b5-4c22-11e0-b482-0016d4d2ec10} - F:\AutoRun.exe

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

Startup: C:\Users\wurzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VirtualExpander.lnk

ShortcutTarget: VirtualExpander.lnk -> C:\Users\wurzer\AppData\Local\Sony Corporation\VirtualExpander\VirtualExpander.exe (No File)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.orf.at/

HKCU\Software\Microsoft\Internet Explorer\Main,SEARCH PAGE = hxxp://de.rd.yahoo.com/customize/ycomp/defaults/sp/*hxxp://de.yahoo.com

HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com

URLSearchHook: HKCU - (No Name) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} -  No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {947BF6F4-AEB4-4298-BF6B-CAE73C31D0C3} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=966134&p={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {947BF6F4-AEB4-4298-BF6B-CAE73C31D0C3} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=966134&p={searchTerms}

BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)

BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)

Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

Toolbar: HKCU - Acer eDataSecurity Management - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)

Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKCU - No Name - {C2DB4FE6-8409-45CE-8010-189A7B5CCE86} -  No File

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Tcpip\..\Interfaces\{AE5E09B9-41E8-40A3-B71E-5D5B8D6702CB}: [NameServer]194.48.139.254 194.48.124.200
 

FireFox:

========

FF ProfilePath: C:\Users\wurzer\AppData\Roaming\Mozilla\Firefox\Profiles\oi2v6a1q.default

FF DefaultSearchEngine: Yahoo

FF SelectedSearchEngine: Yahoo

FF Homepage: hxxp://www.orf.at/

FF Keyword.URL: hxxp://at.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=966134&p=

FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DownloadHelper - C:\Users\wurzer\AppData\Roaming\Mozilla\Firefox\Profiles\oi2v6a1q.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF Extension: addon - C:\Users\wurzer\AppData\Roaming\Mozilla\Firefox\Profiles\oi2v6a1q.default\Extensions\addon@defaulttab.com.xpi

FF Extension: firefox - C:\Users\wurzer\AppData\Roaming\Mozilla\Firefox\Profiles\oi2v6a1q.default\Extensions\firefox@luckyleap.net.xpi

FF Extension: Adblock Plus - C:\Users\wurzer\AppData\Roaming\Mozilla\Firefox\Profiles\oi2v6a1q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\

FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\coFFPlgn\

FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\IPSFF

FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
 

========================== Services (Whitelisted) =================
 

R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512 2007-02-06] (HiTRSUT)

R2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2006-12-22] (Acer Inc.)

R2 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [126976 2006-12-28] (Acer Inc.)

R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248 2007-01-31] (Acer Inc.)

R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-01-02] ()

R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [107008 2006-11-24] ()

R2 N360; C:\Program Files\Norton 360\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation)

R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] ()

S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG)

R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [135168 2007-01-02] (acer)

S2 Automatisches LiveUpdate - Scheduler; "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [x]

S2 gupdate; C:\Program Files\Google\Update\GoogleUpdate.exe /svc [x]

S3 gupdatem; C:\Program Files\Google\Update\GoogleUpdate.exe /medsvc [x]

S4 iPodService; C:\Program Files\iPod\bin\iPodService.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-19] (Microsoft Corporation)

R2 ACEDRV09; C:\Windows\system32\drivers\ACEDRV09.sys [110304 2007-08-31] (Protect Software GmbH)

R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)

R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)

R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [44544 2009-08-24] (AzureWave Technologies, Inc.)

R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\BASHDefs\20131101.003\BHDrvx86.sys [1096280 2013-10-23] (Symantec Corporation)

R1 ccSet_N360; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)

R1 DritekPortIO; C:\PROGRA~1\LAUNCH~1\DPortIO.sys [20112 2006-11-02] (Dritek System Inc.)

R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-27] (Symantec Corporation)

R3 EMSCR; C:\Windows\System32\DRIVERS\EMS7SK.sys [62208 2006-10-25] (ENE Technology Inc.)

R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-27] (Symantec Corporation)

R3 ESDCR; C:\Windows\System32\DRIVERS\ESD7SK.sys [42240 2006-10-25] (ENE Technology Inc.)

R3 ESMCR; C:\Windows\System32\DRIVERS\ESM7SK.sys [76928 2006-10-25] (ENE Technology Inc.)

R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\IPSDefs\20131105.002\IDSvix86.sys [393816 2013-10-28] (Symantec Corporation)

R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [76584 2006-12-07] ()

S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)

S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [860928 2010-05-10] (DiBcom SA)

S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [13056 2006-11-14] (DiBcom S.A.)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20131105.016\NAVENG.SYS [93272 2013-11-01] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20131105.016\NAVEX15.SYS [1612376 2013-11-01] (Symantec Corporation)

R0 PSDFilter; C:\Windows\System32\DRIVERS\psdfilter.sys [20264 2007-02-06] (HiTRUST)

R0 PSDNServ; C:\Windows\System32\drivers\PSDNServ.sys [16680 2007-02-06] (HiTRUST)

R0 psdvdisk; C:\Windows\System32\drivers\psdvdisk.sys [60712 2007-02-06] (HiTRUST)

S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [74912 2009-02-20] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [32288 2009-02-20] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [37280 2009-07-13] (Realtek)

S3 s116bus; C:\Windows\System32\DRIVERS\s116bus.sys [83336 2007-04-03] (MCCI Corporation)

S3 s116mdfl; C:\Windows\System32\DRIVERS\s116mdfl.sys [15112 2007-04-03] (MCCI Corporation)

S3 s116mdm; C:\Windows\System32\DRIVERS\s116mdm.sys [108680 2007-04-03] (MCCI Corporation)

S3 s116mgmt; C:\Windows\System32\DRIVERS\s116mgmt.sys [100488 2007-04-03] (MCCI Corporation)

S3 s116nd5; C:\Windows\System32\DRIVERS\s116nd5.sys [23176 2007-04-03] (MCCI Corporation)

S3 s116obex; C:\Windows\System32\DRIVERS\s116obex.sys [98696 2007-04-03] (MCCI Corporation)

S3 s116unic; C:\Windows\System32\DRIVERS\s116unic.sys [99080 2007-04-03] (MCCI Corporation)

R1 SCDEmu; C:\Windows\System32\Drivers\SCDEmu.sys [113336 2013-07-22] (Power Software Ltd)

S3 sonypvs1; C:\Windows\System32\DRIVERS\sonypvs1.sys [102220 2002-10-15] (Sony Corporation)

R3 SRTSP; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\N360\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\N360\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-05] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)

R1 SYMTDIv; C:\Windows\System32\Drivers\N360\1404000.028\SYMTDIV.SYS [352344 2013-04-25] (Symantec Corporation)

S3 w810bus; C:\Windows\System32\DRIVERS\w810bus.sys [58288 2006-02-20] (MCCI)

S3 w810mdfl; C:\Windows\System32\DRIVERS\w810mdfl.sys [8336 2006-02-20] (MCCI)

S3 w810mdm; C:\Windows\System32\DRIVERS\w810mdm.sys [94064 2006-02-20] (MCCI)

S3 w810mgmt; C:\Windows\System32\DRIVERS\w810mgmt.sys [85408 2006-02-20] (MCCI)

S3 w810obex; C:\Windows\System32\DRIVERS\w810obex.sys [83344 2006-02-20] (MCCI)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 SYMFW; \SystemRoot\System32\Drivers\N360\0308000.029\SYMFW.SYS [x]

S3 SYMNDISV; \SystemRoot\System32\Drivers\N360\0308000.029\SYMNDISV.SYS [x]

S4 UIUSys; system32\DRIVERS\UIUSYS.SYS [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-06 15:57 - 2013-11-06 15:57 - 01089445 _____ (Farbar) C:\Users\wurzer\Desktop\FRST.exe

2013-11-06 15:54 - 2013-11-06 15:54 - 00000831 _____ C:\Users\wurzer\Desktop\checkup.txt

2013-11-06 15:52 - 2013-11-06 15:53 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-11-06 15:49 - 2013-11-06 15:49 - 00891167 _____ C:\Users\wurzer\Downloads\SecurityCheck.exe

2013-11-06 15:21 - 2013-11-06 15:21 - 00663040 _____ () C:\Windows\is-55349.exe

2013-11-06 15:21 - 2013-11-06 15:21 - 00012728 _____ C:\Windows\is-55349.msg

2013-11-06 15:21 - 2013-11-06 15:21 - 00001992 _____ C:\Windows\is-55349.lst

2013-10-29 14:56 - 2013-10-29 14:56 - 00000000 ____D C:\Program Files\ESET

2013-10-29 14:55 - 2013-10-29 14:55 - 02347384 _____ (ESET) C:\Users\wurzer\Downloads\esetsmartinstaller_enu.exe

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\Users\wurzer\Documents\iOrgSoftDVD Maker

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\Users\wurzer\AppData\Roaming\iOrgSoft DVD Maker

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\ProgramData\iOrgSoft DVD Maker

2013-10-23 14:29 - 2013-10-23 14:29 - 00000000 ____D C:\Program Files\iOrgSoft

2013-10-23 14:20 - 2013-10-23 14:20 - 00000000 ____D C:\Program Files\LSoft Technologies

2013-10-23 14:18 - 2013-10-23 14:18 - 00000000 ____D C:\Users\wurzer\AppData\Roaming\DefaultTab

2013-10-09 13:23 - 2013-09-22 11:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-10-09 13:23 - 2013-09-22 11:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-10-09 13:23 - 2013-09-22 11:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-10-09 13:23 - 2013-09-22 11:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-10-09 13:23 - 2013-09-22 11:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-10-09 13:23 - 2013-09-22 11:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-10-09 13:23 - 2013-09-22 11:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-10-09 13:23 - 2013-09-22 11:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-10-09 13:23 - 2013-09-22 11:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-10-09 13:23 - 2013-09-22 11:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-10-09 13:23 - 2013-09-22 11:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-10-09 13:23 - 2013-09-22 11:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-10-09 13:23 - 2013-09-22 11:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-10-09 13:23 - 2013-09-22 11:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-10-09 13:23 - 2013-09-22 11:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-10-09 13:23 - 2013-09-22 10:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-10-09 13:09 - 2013-08-29 08:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-10-09 13:09 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-10-09 13:09 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-10-09 13:09 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-10-09 13:09 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-10-09 13:09 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-10-09 13:09 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-10-09 13:09 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-10-09 13:09 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-10-09 13:09 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-10-09 13:09 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-10-09 13:09 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-10-09 13:09 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 13:09 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-10-09 13:09 - 2013-07-12 10:04 - 00073344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys

2013-10-09 13:08 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-10-09 13:08 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys

2013-10-09 13:08 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-10-09 13:08 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-10-09 13:08 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-10-09 13:08 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-10-09 13:08 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-10-09 13:08 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-10-09 13:08 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-10-09 13:08 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-10-09 13:08 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-10-09 13:08 - 2011-05-05 14:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
 

==================== One Month Modified Files and Folders =======
 

2013-11-06 15:57 - 2013-11-06 15:57 - 01089445 _____ (Farbar) C:\Users\wurzer\Desktop\FRST.exe

2013-11-06 15:54 - 2013-11-06 15:54 - 00000831 _____ C:\Users\wurzer\Desktop\checkup.txt

2013-11-06 15:54 - 2012-10-24 21:28 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-11-06 15:53 - 2013-11-06 15:52 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-11-06 15:49 - 2013-11-06 15:49 - 00891167 _____ C:\Users\wurzer\Downloads\SecurityCheck.exe

2013-11-06 15:45 - 2007-04-11 03:09 - 01736665 _____ C:\Windows\WindowsUpdate.log

2013-11-06 15:22 - 2012-10-30 20:10 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI

2013-11-06 15:21 - 2013-11-06 15:21 - 00663040 _____ () C:\Windows\is-55349.exe

2013-11-06 15:21 - 2013-11-06 15:21 - 00012728 _____ C:\Windows\is-55349.msg

2013-11-06 15:21 - 2013-11-06 15:21 - 00001992 _____ C:\Windows\is-55349.lst

2013-11-06 15:21 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Help

2013-11-06 15:15 - 2007-06-13 22:17 - 00000747 _____ C:\Users\Public\Desktop\Nutri Plus.lnk

2013-11-06 14:54 - 2012-01-13 09:50 - 01445116 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-06 14:21 - 2006-11-02 13:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-06 14:21 - 2006-11-02 13:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-06 11:55 - 2012-01-27 16:40 - 00000000 ____D C:\Users\wurzer\AppData\Roaming\dvdcss

2013-11-06 10:23 - 2008-12-16 00:32 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-11-06 10:21 - 2012-03-20 21:41 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-06 10:20 - 2006-11-02 14:01 - 00032516 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-11-05 17:08 - 2013-01-16 10:07 - 01743040 _____ C:\Windows\PFRO.log

2013-11-03 21:05 - 2010-06-13 10:37 - 00000000 ____D C:\Users\wurzer\AppData\Local\CrashDumps

2013-10-29 14:56 - 2013-10-29 14:56 - 00000000 ____D C:\Program Files\ESET

2013-10-29 14:55 - 2013-10-29 14:55 - 02347384 _____ (ESET) C:\Users\wurzer\Downloads\esetsmartinstaller_enu.exe

2013-10-25 23:38 - 2007-05-26 17:43 - 00023240 _____ C:\Users\wurzer\AppData\Roaming\nvModes.001

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\Users\wurzer\Documents\iOrgSoftDVD Maker

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\Users\wurzer\AppData\Roaming\iOrgSoft DVD Maker

2013-10-23 14:30 - 2013-10-23 14:30 - 00000000 ____D C:\ProgramData\iOrgSoft DVD Maker

2013-10-23 14:29 - 2013-10-23 14:29 - 00000000 ____D C:\Program Files\iOrgSoft

2013-10-23 14:20 - 2013-10-23 14:20 - 00000000 ____D C:\Program Files\LSoft Technologies

2013-10-23 14:20 - 2007-03-27 19:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-10-23 14:18 - 2013-10-23 14:18 - 00000000 ____D C:\Users\wurzer\AppData\Roaming\DefaultTab

2013-10-16 16:59 - 2012-02-18 00:52 - 00123392 _____ C:\Users\wurzer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-10-11 11:56 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-10-09 13:42 - 2006-11-02 13:47 - 00327440 _____ C:\Windows\system32\FNTCACHE.DAT

2013-10-09 13:40 - 2008-03-09 13:16 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-09 13:30 - 2013-07-12 10:16 - 00000000 ____D C:\Windows\system32\MRT

2013-10-09 13:27 - 2006-11-02 11:24 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
 

Files to move or delete:

====================

C:\Users\wurzer\ccsetup302.exe

C:\Users\wurzer\DriverDoc2011.exe

C:\Users\wurzer\Firefox Setup 16.0.1.exe

C:\Users\wurzer\IE9-WindowsVista-x86-enu.exe

C:\Users\wurzer\YouTubeDownloaderSetup254.exe

C:\Users\wurzer\YouTubeDownloaderSetup33.exe
 
 

Some content of TEMP:

====================

C:\Users\wurzer\AppData\Local\Temp\DataCard_Setup.exe

C:\Users\wurzer\AppData\Local\Temp\ResetDevice.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-06 10:32
 

==================== End Of Log ============================

--- --- ---

--- --- ---

checkup:

Code:

 Results of screen317's Security Check version 0.99.74  

 Windows Vista Service Pack 2 x86 (UAC is enabled)  

 Internet Explorer 9  

 Internet Explorer 8  
 ``````````````Antivirus/Firewall Check:`````````````` 

Norton 360    

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Adobe Reader 10.1.7 Adobe Reader out of Date!  

 Mozilla Firefox (24.0) 
 ````````Process Check: objlist.exe by Laurent````````  

 Norton ccSvcHst.exe 

 Empowering Technology eSettings Service capuserv.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````