Trojaner-Board - Reveton Trojaner nicht vollständig entfernt

Hallo Team,
das ist das log file von adwcleaner:

Code:

# AdwCleaner v3.014 - Bericht erstellt am 06/12/2013 um 21:10:39

# Updated 01/12/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : CADCAM - WENDELIN

# Gestartet von : C:\Users\CADCAM\Desktop\adwcleaner.exe

# Option : L�schen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gel�scht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB

Ordner Gel�scht : C:\Users\CADCAM\AppData\Local\Temp\Iminent

Ordner Gel�scht : C:\Users\CADCAM\AppData\Local\Temp\OCS

Ordner Gel�scht : C:\Users\CADCAM\AppData\Roaming\OpenCandy
 

***** [ Verkn�pfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_hjsplit_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_hjsplit_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-dub_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-dub_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_iwisoft-free-video-downloader_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_iwisoft-free-video-downloader_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mws-reader_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mws-reader_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_streamtransport_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_streamtransport_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_xmedia-recode_RASAPI32

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_xmedia-recode_RASMANCS

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schl�ssel Gel�scht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schl�ssel Gel�scht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schl�ssel Gel�scht : HKCU\Software\OCS

Schl�ssel Gel�scht : HKCU\Software\Softonic

Schl�ssel Gel�scht : HKLM\Software\Iminent

Schl�ssel Gel�scht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

*************************
 

AdwCleaner[R0].txt - [12211 octets] - [06/12/2013 21:06:20]

AdwCleaner[S0].txt - [11870 octets] - [06/12/2013 21:10:39]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11931 octets] ##########

Dann habe ich JRT ausgeführt. Dazu scheine ich zu blöd zu sein, denn es öffnet sich nur ein schwarzes Fenster mit der Commandozeile :heulen:

Ich habe dann mit FRST64 weitergemacht und diese logs erzeugt:
[CODE]
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2013

Ran by CADCAM (administrator) on WENDELIN on 06-12-2013 22:28:18

Running from C:\Users\CADCAM\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Could not list processes ===============
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7714336 2009-04-14] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\SkyTel.exe [1833504 2009-04-14] (Realtek Semiconductor Corp.)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-09-25] (Adobe Systems Incorporated)

HKCU\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)

MountPoints2: {fe0874e9-a0a2-11e0-86fa-806e6f6e6963} - E:\Setup.exe

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\reader_sl.exe [39792 2008-01-11] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [296056 2012-06-08] (RealNetworks, Inc.)

HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)

HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [78312 2012-05-09] (cyberlink)

HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)

Startup: C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8zlfqr2e.lnk

ShortcutTarget: 8zlfqr2e.lnk -> C:\PROGRA~3\e2rqflz8.dss (No File)

Startup: C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\CADCAM\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ifgo0b.lnk

ShortcutTarget: ifgo0b.lnk -> C:\PROGRA~3\b0ogfi.dss (No File)

Startup: C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lw9lcvr.lnk

ShortcutTarget: lw9lcvr.lnk -> C:\PROGRA~3\rvcl9wl.dss (No File)

Startup: C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\odlbod1b.lnk

ShortcutTarget: odlbod1b.lnk -> C:\PROGRA~3\b1dobldo.dss (No File)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x411194B52355CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File

Tcpip\Parameters: [DhcpNameServer] 80.69.100.206 80.69.100.182
 

==================== Services (Whitelisted) =================
 

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [242664 2012-05-09] (CyberLink)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG)

R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1246496 2009-09-17] (SafeNet, Inc)

S2 Winmgmt; C:\PROGRA~3\ifgo0b.pss [x]
 

==================== Drivers (Whitelisted) ====================
 

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

S3 OxPCIeSer; C:\Windows\System32\DRIVERS\OxPCIeSer.sys [101672 2008-01-16] (OEM)

S3 OxPCIeSerMf; C:\Windows\System32\DRIVERS\OxPCIeMf.sys [31016 2008-01-16] (OEM)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)

S3 MSICDSetup; \??\E:\CDriver64.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-06 22:28 - 2013-12-06 22:29 - 00006477 _____ C:\Users\CADCAM\Desktop\FRST.txt

2013-12-06 22:27 - 2013-12-06 22:27 - 00000000 ____D C:\FRST

2013-12-06 22:26 - 2013-12-06 22:26 - 01925820 _____ (Farbar) C:\Users\CADCAM\Desktop\FRST64.exe

2013-12-06 21:45 - 2013-12-06 16:25 - 01034531 _____ (Thisisu) C:\Users\CADCAM\Desktop\JRT.exe

2013-12-06 21:06 - 2013-12-06 21:10 - 00000000 ____D C:\AdwCleaner

2013-12-03 20:15 - 2013-12-03 20:15 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\Malwarebytes

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-03 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-03 20:13 - 2013-12-02 13:08 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\CADCAM\Desktop\mbam-setup-1.75.0.1300.exe

2013-12-03 20:13 - 2013-12-02 13:06 - 01110034 _____ C:\Users\CADCAM\Desktop\adwcleaner.exe

2013-12-03 20:13 - 2013-12-02 13:05 - 00602112 _____ (OldTimer Tools) C:\Users\CADCAM\Desktop\OTL.exe

2013-12-01 22:56 - 2013-12-01 23:01 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP

2013-12-01 16:40 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-12-01 16:37 - 2013-12-01 16:37 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-01 16:37 - 2013-12-01 16:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-01 16:37 - 2013-12-01 16:37 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-01 16:37 - 2013-12-01 16:37 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-01 16:37 - 2013-12-01 16:37 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-01 16:37 - 2013-12-01 16:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-01 16:37 - 2013-12-01 16:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-01 16:37 - 2013-12-01 16:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-01 16:37 - 2013-12-01 16:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-01 16:37 - 2013-12-01 16:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-01 16:37 - 2013-12-01 16:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-01 16:35 - 2013-12-01 16:50 - 00023377 _____ C:\Windows\IE11_main.log

2013-11-24 21:37 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-11-24 21:37 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-11-22 22:07 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-11-22 22:07 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-11-22 22:07 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-22 22:07 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-11-22 22:07 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-11-22 22:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-22 22:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-11-22 22:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-11-22 22:07 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-11-22 22:07 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-11-22 22:07 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-11-22 22:07 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-11-22 22:07 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-11-22 22:07 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-11-22 22:07 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-11-22 22:07 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-11-22 22:07 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-11-22 22:07 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-11-22 22:07 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-11-22 22:07 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-11-22 22:07 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-11-22 22:07 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-11-22 22:07 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-11-22 22:07 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-11-22 22:07 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-11-22 22:07 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-11-22 22:07 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-11-22 22:07 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-11-22 22:07 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-11-22 22:07 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-11-22 22:07 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-11-22 22:07 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-11-22 22:07 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-11-22 22:07 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-11-22 22:07 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-11-22 22:07 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-11-22 22:07 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-11-22 22:07 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-11-22 22:07 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-11-22 22:07 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-11-22 22:07 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-11-22 22:07 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-11-22 22:07 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-11-22 22:07 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-11-22 22:07 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-11-22 22:07 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-11-22 22:07 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-11-22 22:07 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-11-22 22:07 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-11-22 22:07 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-11-22 22:07 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-11-22 22:07 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-11-22 22:07 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-11-22 22:07 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-11-22 22:07 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-11-22 22:07 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-11-22 22:07 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-11-22 22:07 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-11-22 22:07 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-11-22 22:07 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-11-22 22:07 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-11-22 22:07 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-11-22 22:07 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-11-22 22:07 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-11-22 22:07 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-11-22 22:07 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-11-22 22:07 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-11-22 22:07 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-11-22 22:07 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-11-22 22:07 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-11-22 22:07 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-11-22 22:04 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-11-22 22:04 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-11-22 22:04 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-11-22 22:04 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-11-22 22:04 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-22 22:04 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-11-22 22:04 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-11-17 18:50 - 2013-11-17 18:50 - 00000000 ____D C:\Users\CADCAM\Documents\Adobe

2013-11-17 01:47 - 2013-11-17 01:47 - 00003504 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-WENDELIN-CADCAM

2013-11-17 01:46 - 2013-11-17 01:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-11-17 01:46 - 2013-11-17 01:46 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\PDAppFlex

2013-11-17 01:30 - 2013-11-17 01:30 - 00000000 ____D C:\Program Files\Adobe

2013-11-17 01:28 - 2013-11-17 01:31 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-11-17 01:17 - 2013-11-17 01:17 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-12-06 22:29 - 2013-12-06 22:28 - 00006477 _____ C:\Users\CADCAM\Desktop\FRST.txt

2013-12-06 22:27 - 2013-12-06 22:27 - 00000000 ____D C:\FRST

2013-12-06 22:27 - 2009-07-14 05:45 - 00018672 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-06 22:27 - 2009-07-14 05:45 - 00018672 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-06 22:26 - 2013-12-06 22:26 - 01925820 _____ (Farbar) C:\Users\CADCAM\Desktop\FRST64.exe

2013-12-06 22:26 - 2010-01-14 16:02 - 01902752 _____ C:\Windows\WindowsUpdate.log

2013-12-06 22:21 - 2012-07-22 18:19 - 00000000 ___RD C:\Users\CADCAM\Google Drive

2013-12-06 22:21 - 2011-10-27 22:08 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\Dropbox

2013-12-06 22:20 - 2012-07-22 18:13 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-06 22:20 - 2011-10-27 22:13 - 00000000 ___RD C:\Users\CADCAM\Dropbox

2013-12-06 22:20 - 2010-01-14 17:40 - 00132834 _____ C:\Windows\PFRO.log

2013-12-06 22:20 - 2010-01-14 17:37 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-06 22:20 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-06 22:20 - 2009-07-14 05:51 - 00092084 _____ C:\Windows\setupact.log

2013-12-06 22:17 - 2011-08-07 20:06 - 01586676 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-06 22:17 - 2009-07-14 18:58 - 00699432 _____ C:\Windows\system32\perfh007.dat

2013-12-06 22:17 - 2009-07-14 18:58 - 00149572 _____ C:\Windows\system32\perfc007.dat

2013-12-06 22:17 - 2009-07-14 06:13 - 01641566 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-06 22:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-12-06 21:58 - 2012-07-22 18:13 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-06 21:10 - 2013-12-06 21:06 - 00000000 ____D C:\AdwCleaner

2013-12-06 21:09 - 2010-01-15 13:47 - 00000000 ____D C:\Users\CADCAM\AppData\Local\Adobe

2013-12-06 16:25 - 2013-12-06 21:45 - 01034531 _____ (Thisisu) C:\Users\CADCAM\Desktop\JRT.exe

2013-12-05 22:53 - 2012-07-22 18:13 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-05 22:53 - 2012-07-22 18:13 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-05 22:37 - 2013-01-19 13:38 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\vlc

2013-12-03 20:15 - 2013-12-03 20:15 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\Malwarebytes

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-03 20:15 - 2013-12-03 20:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-02 13:08 - 2013-12-03 20:13 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\CADCAM\Desktop\mbam-setup-1.75.0.1300.exe

2013-12-02 13:06 - 2013-12-03 20:13 - 01110034 _____ C:\Users\CADCAM\Desktop\adwcleaner.exe

2013-12-02 13:05 - 2013-12-03 20:13 - 00602112 _____ (OldTimer Tools) C:\Users\CADCAM\Desktop\OTL.exe

2013-12-02 00:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-01 23:01 - 2013-12-01 22:56 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP

2013-12-01 20:27 - 2012-05-23 20:48 - 00007640 _____ C:\Users\CADCAM\AppData\Local\Resmon.ResmonCfg

2013-12-01 16:53 - 2010-01-14 16:06 - 00001430 _____ C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-01 16:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-01 16:50 - 2013-12-01 16:35 - 00023377 _____ C:\Windows\IE11_main.log

2013-12-01 16:37 - 2013-12-01 16:37 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-01 16:37 - 2013-12-01 16:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-01 16:37 - 2013-12-01 16:37 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-01 16:37 - 2013-12-01 16:37 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-01 16:37 - 2013-12-01 16:37 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-01 16:37 - 2013-12-01 16:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-01 16:37 - 2013-12-01 16:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-01 16:37 - 2013-12-01 16:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-01 16:37 - 2013-12-01 16:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-01 16:37 - 2013-12-01 16:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-01 16:37 - 2013-12-01 16:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-01 16:37 - 2013-12-01 16:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-01 16:37 - 2013-12-01 16:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-24 19:57 - 2010-01-14 16:06 - 00000000 ___RD C:\Users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-11-23 23:28 - 2011-11-07 23:24 - 00000069 _____ C:\Windows\NeroDigital.ini

2013-11-22 22:26 - 2012-08-08 20:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-11-22 22:26 - 2012-08-08 20:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-11-22 22:26 - 2009-07-14 05:45 - 04939000 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-22 22:20 - 2011-08-07 20:06 - 00001912 _____ C:\Windows\epplauncher.mif

2013-11-22 22:20 - 2011-08-07 20:05 - 00000000 ____D C:\Program Files\Microsoft Security Client

2013-11-22 22:20 - 2011-08-07 20:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client

2013-11-22 22:14 - 2013-09-15 11:32 - 00000000 ____D C:\Windows\system32\MRT

2013-11-19 11:21 - 2010-01-15 15:03 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2013-11-18 22:29 - 2010-01-15 13:47 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\Adobe

2013-11-17 23:44 - 2012-04-06 03:29 - 00023552 _____ C:\Users\CADCAM\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-11-17 18:50 - 2013-11-17 18:50 - 00000000 ____D C:\Users\CADCAM\Documents\Adobe

2013-11-17 11:20 - 2012-12-30 10:28 - 00000000 ____D C:\Users\CADCAM\.gimp-2.8

2013-11-17 01:47 - 2013-11-17 01:47 - 00003504 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-WENDELIN-CADCAM

2013-11-17 01:47 - 2013-11-17 01:46 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-11-17 01:47 - 2012-12-30 22:35 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\NVIDIA

2013-11-17 01:46 - 2013-11-17 01:46 - 00000000 ____D C:\Users\CADCAM\AppData\Roaming\PDAppFlex

2013-11-17 01:35 - 2010-01-14 17:41 - 00058408 _____ C:\Users\CADCAM\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-17 01:31 - 2013-11-17 01:28 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-11-17 01:30 - 2013-11-17 01:30 - 00000000 ____D C:\Program Files\Adobe

2013-11-17 01:30 - 2010-01-15 13:47 - 00000000 ____D C:\ProgramData\Adobe

2013-11-17 01:29 - 2010-01-15 13:47 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-11-17 01:17 - 2013-11-17 01:17 - 00001070 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

2013-11-07 16:00 - 2011-08-07 19:10 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Some content of TEMP:

====================

C:\Users\CADCAM\AppData\Local\Temp\8EDA.exe

C:\Users\CADCAM\AppData\Local\Temp\AskSLib.dll

C:\Users\CADCAM\AppData\Local\Temp\CERECConfigurator.exe

C:\Users\CADCAM\AppData\Local\Temp\COMAP.EXE

C:\Users\CADCAM\AppData\Local\Temp\Creative Cloud Helper.exe

C:\Users\CADCAM\AppData\Local\Temp\nvStInst.exe

C:\Users\CADCAM\AppData\Local\Temp\Quarantine.exe

C:\Users\CADCAM\AppData\Local\Temp\SHSetup.exe

C:\Users\CADCAM\AppData\Local\Temp\stubhelper.dll

C:\Users\CADCAM\AppData\Local\Temp\vlc-2.0.2-win32.exe

C:\Users\CADCAM\AppData\Local\Temp\vlc-2.0.4-win32.exe

C:\Users\CADCAM\AppData\Local\Temp\vlc-2.0.5-win32.exe

C:\Users\CADCAM\AppData\Local\Temp\vlc-2.0.6-win32.exe

C:\Users\CADCAM\AppData\Local\Temp\vlc-2.0.8-win32.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!
 
 

LastRegBack: 2013-12-02 00:00
 

==================== End Of Log ============================

--- --- ---

--- --- ---

und addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-12-2013

Ran by CADCAM at 2013-12-06 22:53:16

Running from C:\Users\CADCAM\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 
 

==================== Installed Programs ======================
 

Adobe Creative Cloud (x32 Version: 2.2.1.260)

Adobe Flash Player 11 ActiveX (x32 Version: 11.5.502.146)

Adobe Photoshop CC (x32 Version: 14.0)

Adobe Reader 8.1.2 - Deutsch (x32 Version: 8.1.2)

Avidemux 2.6 (x32 Version: 2.6.1.8321)

Camtasia Studio 7 (x32 Version: 7.0.1)

CyberLink BD_3D Advisor 2.0 (x32 Version: 2.0.5425)

CyberLink Media Suite 10 (x32 Version: 10.0)

CyberLink Media Suite 10 (x32 Version: 10.2021)

CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3019_44673)

CyberLink Power2Go 7 (x32 Version: 7.0.0.3126b)

CyberLink PowerDVD 10 (x32 Version: 10.0.4125.52)

Dropbox (HKCU Version: 2.0.22)

Free Audio CD to MP3 Converter version 1.3.12.1228 (x32 Version: 1.3.12.1228)

Free DVD Video Converter version 2.0.5.508 (x32 Version: 2.0.5.508)

Free Video Dub version 2.0.16.1212 (x32 Version: 2.0.16.1212)

Free Video Joiner (x32)

Free Video to JPG Converter version 5.0.21.1212 (x32 Version: 5.0.21.1212)

GIMP 2.8.2 (Version: 2.8.2)

Google Drive (x32 Version: 1.12.5329.1887)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0)

Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)

Google Update Helper (x32 Version: 1.3.22.3)

L&H TTS3000 Deutsch (x32)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)

Microsoft Security Client (Version: 4.4.0304.0)

Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)

Microsoft Security Essentials (Version: 4.4.304.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Nero 8 Essentials (x32 Version: 8.3.99)

neroxml (x32 Version: 1.0.0)

NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)

NVIDIA Grafiktreiber 311.06 (Version: 311.06)

NVIDIA Install Application (Version: 2.1002.108.688)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)

NVIDIA Systemsteuerung 311.06 (Version: 311.06)

NVIDIA Update 1.11.3 (Version: 1.11.3)

NVIDIA Update Components (Version: 1.11.3)

PDF Settings CC (x32 Version: 12.0)

Pixum Fotobuch (x32 Version: 5.0.1)

psynetic® Gif-X 3.00 (x32 Version: 3.00)

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)

RealPlayer (x32 Version: 15.0.4)

RealSpeak Solo fur Deutsch - Steffi (x32 Version: 4.00.0000)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5832)

RealUpgrade 1.1 (x32 Version: 1.1.0)

VCRedistSetup (x32 Version: 1.0.0)

Video to GIF Animator 2.0 (x32)

VLC media player 2.0.8 (x32 Version: 2.0.8)

Windows Essentials Media Codec Pack 4.0 [64-Bit] (x32 Version: 4.0)

Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0)

WinRAR 4.01 (64-Bit) (Version: 4.01.0)

XMedia Recode Version 3.1.1.6 (x32 Version: 3.1.1.6)
 

==================== Restore Points  =========================
 

Could not list Restore Points. Check WMI.
 
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {06C9B9D7-FF21-4AC7-8167-B6F3A658E783} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-56278748-1824488600-3805507179-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-04-30] (RealNetworks, Inc.)

Task: {43EFC96A-6BD8-4740-952D-1E0A7833AA17} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-56278748-1824488600-3805507179-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-04-30] (RealNetworks, Inc.)

Task: {A9266E28-4F71-4998-AFB2-0AFBF41D519B} - System32\Tasks\Windows Codec Update Service => C:\Program Files (x86)\Essentials Codec Pack\WECPUpdate.exe [2012-02-03] (MediaCodec.Org)

Task: {CF61C7AA-5CCC-4FA5-A707-61CBDAFE3342} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-22] (Google Inc.)

Task: {E0754907-60BB-4572-95E3-089C12E5DCFD} - System32\Tasks\AdobeAAMUpdater-1.0-WENDELIN-CADCAM => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-09-25] (Adobe Systems Incorporated)

Task: {F78F32FE-ED51-42A6-BDD9-89B55A88EC9A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-22] (Google Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:AF2E656A

AlternateDataStreams: C:\ProgramData\TEMP:F75CCE86
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Could not list Devices. Check WMI.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/02/2013 00:08:17 AM) (Source: MsiInstaller) (User: WENDELIN)

Description: Produkt: SpyHunter -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.
 

Error: (12/01/2013 10:46:58 PM) (Source: Application Hang) (User: )

Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: f0c
 

Startzeit: 01ceeeda971e8913
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
 

Berichts-ID:
 

Error: (12/01/2013 10:18:50 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: f4c
 

Startzeit: 01ceeeda97f7264b
 

Endzeit: 78
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID:
 

Error: (12/01/2013 08:22:59 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Photoshop.exe, Version: 14.0.0.0, Zeitstempel: 0x5176451b

Name des fehlerhaften Moduls: Liquify.8bf, Version: 14.0.0.0, Zeitstempel: 0x51763ab8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000053c47

ID des fehlerhaften Prozesses: 0x12fc

Startzeit der fehlerhaften Anwendung: 0xPhotoshop.exe0

Pfad der fehlerhaften Anwendung: Photoshop.exe1

Pfad des fehlerhaften Moduls: Photoshop.exe2

Berichtskennung: Photoshop.exe3
 

Error: (12/01/2013 05:29:14 PM) (Source: MsiInstaller) (User: WENDELIN)

Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.
 

Error: (12/01/2013 05:19:41 PM) (Source: Application Hang) (User: )

Description: Programm Photoshop.exe, Version 14.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1390
 

Startzeit: 01ceeeb0f646c41f
 

Endzeit: 78
 

Anwendungspfad: C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Berichts-ID:
 

Error: (12/01/2013 04:40:53 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IE11-Windows6.1-x64-en-us.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b8b98

Name des fehlerhaften Moduls: IE11-Windows6.1-x64-en-us.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b8b98

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000b2a1

ID des fehlerhaften Prozesses: 0x8e0

Startzeit der fehlerhaften Anwendung: 0xIE11-Windows6.1-x64-en-us.exe0

Pfad der fehlerhaften Anwendung: IE11-Windows6.1-x64-en-us.exe1

Pfad des fehlerhaften Moduls: IE11-Windows6.1-x64-en-us.exe2

Berichtskennung: IE11-Windows6.1-x64-en-us.exe3
 

Error: (12/01/2013 04:32:42 PM) (Source: Application Hang) (User: )

Description: Programm Photoshop.exe, Version 14.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 894
 

Startzeit: 01ceeeaa668a90e9
 

Endzeit: 78
 

Anwendungspfad: C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Berichts-ID:
 

Error: (12/01/2013 04:16:05 PM) (Source: Application Hang) (User: )

Description: Programm Photoshop.exe, Version 14.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 684
 

Startzeit: 01ceeea81f19a313
 

Endzeit: 94
 

Anwendungspfad: C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Berichts-ID:
 

Error: (12/01/2013 04:07:19 PM) (Source: Application Hang) (User: )

Description: Programm Photoshop.exe, Version 14.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 664
 

Startzeit: 01ceeea6a6b68ff5
 

Endzeit: 68
 

Anwendungspfad: C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Berichts-ID:
 
 

System errors:

=============

Error: (12/06/2013 10:55:54 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:55:23 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:54:47 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:54:16 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:53:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:53:16 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:40:56 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:40:26 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:39:56 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/06/2013 10:39:26 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: 

%%126
 
 

Microsoft Office Sessions:

=========================

Error: (12/02/2013 00:08:17 AM) (Source: MsiInstaller)(User: WENDELIN)

Description: Produkt: SpyHunter -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (12/01/2013 10:46:58 PM) (Source: Application Hang)(User: )

Description: iexplore.exe11.0.9600.16428f0c01ceeeda971e89130C:\Program Files\Internet Explorer\iexplore.exe
 

Error: (12/01/2013 10:18:50 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE11.0.9600.16428f4c01ceeeda97f7264b78C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Error: (12/01/2013 08:22:59 PM) (Source: Application Error)(User: )

Description: Photoshop.exe14.0.0.05176451bLiquify.8bf14.0.0.051763ab8c00000050000000000053c4712fc01ceeec9854d3b74C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exeC:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Required\Plug-Ins\Filters\Liquify.8bffcaef585-5abd-11e3-a48c-002185123ef9
 

Error: (12/01/2013 05:29:14 PM) (Source: MsiInstaller)(User: WENDELIN)

Description: Produkt: Microsoft Fix it 50981 -- Dieses Microsoft-Fix it ist nicht für Ihr Betriebssystem oder Ihre Version der Anwendung vorgesehen.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (12/01/2013 05:19:41 PM) (Source: Application Hang)(User: )

Description: Photoshop.exe14.0.0.0139001ceeeb0f646c41f78C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Error: (12/01/2013 04:40:53 PM) (Source: Application Error)(User: )

Description: IE11-Windows6.1-x64-en-us.exe11.0.9600.16428525b8b98IE11-Windows6.1-x64-en-us.exe11.0.9600.16428525b8b98c00000050000b2a18e001ceeeaaf7a2c9b2C:\Windows\SoftwareDistribution\Download\Install\IE11-Windows6.1-x64-en-us.exeC:\Windows\SoftwareDistribution\Download\Install\IE11-Windows6.1-x64-en-us.exef6023a41-5a9e-11e3-bb25-002185123ef9
 

Error: (12/01/2013 04:32:42 PM) (Source: Application Hang)(User: )

Description: Photoshop.exe14.0.0.089401ceeeaa668a90e978C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Error: (12/01/2013 04:16:05 PM) (Source: Application Hang)(User: )

Description: Photoshop.exe14.0.0.068401ceeea81f19a31394C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 

Error: (12/01/2013 04:07:19 PM) (Source: Application Hang)(User: )

Description: Photoshop.exe14.0.0.066401ceeea6a6b68ff568C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 23%

Total physical RAM: 8191.18 MB

Available physical RAM: 6238.48 MB

Total Pagefile: 16380.54 MB

Available Pagefile: 14318.83 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: (HD_System) (Fixed) (Total:195.32 GB) (Free:22.4 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (HD_Backup) (Fixed) (Total:234.33 GB) (Free:1.35 GB) NTFS

Drive f: (HD2_1) (Fixed) (Total:100.01 GB) (Free:3.78 GB) NTFS

Drive g: (HD2_3) (Fixed) (Total:229.64 GB) (Free:0.62 GB) NTFS

Drive h: (HD2_2) (Fixed) (Total:100 GB) (Free:9.51 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 93B45C35)

Partition 1: (Active) - (Size=195 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=270 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8E530E68)

Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=266 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

Hallo cosinus,
das lief glatt durch und hat auch was bewirkt. Das Sicherheitscenter ist wieder angeschaltet. Die angeblich fehlenden Module werden nicht mehr angemeckert und das Internet scheint auf den ersten Blick wieder sauber zu funktionieren.
Hier kommt die log Datei von Combofix:

Code:

ComboFix 13-12-08.01 - CADCAM 08.12.2013  21:11:39.1.4 - x64

ausgef�hrt von:: c:\users\CADCAM\Desktop\ComboFix.exe

.

.

((((((((((((((((((((((((((((((((((((   Weitere L�schungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\Roaming

c:\programdata\Roaming\CEREC\maintenance.bin

c:\programdata\Roaming\Installation.log

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-11-08 bis 2013-12-08  ))))))))))))))))))))))))))))))

.

.

2013-12-07 20:58 . 2013-12-07 20:58        --------        d-----w-        c:\windows\ERUNT

2013-12-06 23:20 . 2013-11-08 03:12        10285968        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BCBECAFB-0C7B-4C43-B8A1-9F96448986D3}\mpengine.dll

2013-12-06 21:32 . 2013-10-20 20:07        965000        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C08725CB-6B1D-4660-818D-ACEA8F78EF66}\gapaengine.dll

2013-12-06 21:27 . 2013-12-06 21:27        --------        d-----w-        C:\FRST

2013-12-06 21:08 . 2013-12-06 21:08        --------        d-----w-        c:\windows\Migration

2013-12-06 20:06 . 2013-12-06 20:10        --------        d-----w-        C:\AdwCleaner

2013-12-03 19:36 . 2013-11-08 03:12        10285968        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2013-12-03 19:15 . 2013-12-03 19:15        --------        d-----w-        c:\users\CADCAM\AppData\Roaming\Malwarebytes

2013-12-03 19:15 . 2013-12-03 19:15        --------        d-----w-        c:\programdata\Malwarebytes

2013-12-03 19:15 . 2013-12-03 19:15        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2013-12-03 19:15 . 2013-04-04 13:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-12-03 19:15 . 2013-12-03 19:15        --------        d-----w-        c:\users\CADCAM\AppData\Local\Programs

2013-12-01 21:56 . 2013-12-01 22:01        --------        d-----w-        c:\windows\CD09642E061D4844BA37ED1480916404.TMP

2013-12-01 21:56 . 2013-12-01 21:56        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard

2013-12-01 15:40 . 2013-10-14 17:00        28368        ----a-w-        c:\windows\system32\IEUDINIT.EXE

2013-11-24 20:37 . 2013-09-04 12:12        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys

2013-11-24 20:37 . 2013-09-04 12:11        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys

2013-11-24 20:37 . 2013-09-04 12:11        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys

2013-11-24 20:37 . 2013-09-04 12:11        52736        ----a-w-        c:\windows\system32\drivers\usbehci.sys

2013-11-24 20:37 . 2013-09-04 12:11        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys

2013-11-24 20:37 . 2013-09-04 12:11        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys

2013-11-24 20:37 . 2013-09-04 12:11        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys

2013-11-22 21:04 . 2013-04-17 07:02        1230336        ----a-w-        c:\windows\SysWow64\WindowsCodecs.dll

2013-11-22 21:04 . 2013-04-17 06:24        1424384        ----a-w-        c:\windows\system32\WindowsCodecs.dll

2013-11-22 21:04 . 2013-10-12 02:30        830464        ----a-w-        c:\windows\system32\nshwfp.dll

2013-11-22 21:04 . 2013-10-12 02:29        859648        ----a-w-        c:\windows\system32\IKEEXT.DLL

2013-11-22 21:04 . 2013-10-12 02:29        324096        ----a-w-        c:\windows\system32\FWPUCLNT.DLL

2013-11-22 21:04 . 2013-10-12 02:03        656896        ----a-w-        c:\windows\SysWow64\nshwfp.dll

2013-11-22 21:04 . 2013-10-12 02:01        216576        ----a-w-        c:\windows\SysWow64\FWPUCLNT.DLL

2013-11-17 00:46 . 2013-11-17 00:46        --------        d-----w-        c:\users\CADCAM\AppData\Roaming\PDAppFlex

2013-11-17 00:46 . 2013-11-17 00:47        --------        d-----w-        c:\programdata\regid.1986-12.com.adobe

2013-11-17 00:30 . 2013-11-17 00:30        --------        d-----w-        c:\program files\Adobe

2013-11-17 00:28 . 2013-11-17 00:31        --------        d-----w-        c:\program files\Common Files\Adobe

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-11-19 10:21 . 2010-01-15 14:03        267936        ------w-        c:\windows\system32\MpSigStub.exe

2013-11-07 15:00 . 2011-08-07 18:10        82896128        ----a-w-        c:\windows\system32\MRT.exe

2013-10-20 20:07 . 2011-08-14 19:42        965000        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2013-09-27 08:53 . 2013-09-27 08:53        248240        ----a-w-        c:\windows\system32\drivers\MpFilter.sys

2013-09-27 08:53 . 2010-10-24 19:25        134944        ----a-w-        c:\windows\system32\drivers\NisDrvWFP.sys

2013-09-15 10:19 . 2013-09-15 10:19        9728        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        9728        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        604160        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2013-09-15 10:19 . 2013-09-15 10:19        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        522752        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2013-09-15 10:19 . 2013-09-15 10:19        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-09-15 10:19 . 2013-09-15 10:19        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2013-09-15 10:19 . 2013-09-15 10:19        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        4096        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3928064        ----a-w-        c:\windows\system32\d2d1.dll

2013-09-15 10:19 . 2013-09-15 10:19        364544        ----a-w-        c:\windows\SysWow64\XpsGdiConverter.dll

2013-09-15 10:19 . 2013-09-15 10:19        363008        ----a-w-        c:\windows\system32\dxgi.dll

2013-09-15 10:19 . 2013-09-15 10:19        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3584        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        296960        ----a-w-        c:\windows\system32\d3d10core.dll

2013-09-15 10:19 . 2013-09-15 10:19        2776576        ----a-w-        c:\windows\system32\msmpeg2vdec.dll

2013-09-15 10:19 . 2013-09-15 10:19        2565120        ----a-w-        c:\windows\system32\d3d10warp.dll

2013-09-15 10:19 . 2013-09-15 10:19        2560        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        2560        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        249856        ----a-w-        c:\windows\SysWow64\d3d10_1core.dll

2013-09-15 10:19 . 2013-09-15 10:19        2284544        ----a-w-        c:\windows\SysWow64\msmpeg2vdec.dll

2013-09-15 10:19 . 2013-09-15 10:19        220160        ----a-w-        c:\windows\SysWow64\d3d10core.dll

2013-09-15 10:19 . 2013-09-15 10:19        207872        ----a-w-        c:\windows\SysWow64\WindowsCodecsExt.dll

2013-09-15 10:19 . 2013-09-15 10:19        1682432        ----a-w-        c:\windows\system32\XpsPrint.dll

2013-09-15 10:19 . 2013-09-15 10:19        161792        ----a-w-        c:\windows\SysWow64\d3d10_1.dll

2013-09-15 10:19 . 2013-09-15 10:19        1175552        ----a-w-        c:\windows\system32\FntCache.dll

2013-09-15 10:19 . 2013-09-15 10:19        1158144        ----a-w-        c:\windows\SysWow64\XpsPrint.dll

2013-09-15 10:19 . 2013-09-15 10:19        1080832        ----a-w-        c:\windows\SysWow64\d3d10.dll

2013-09-15 10:19 . 2013-09-15 10:19        10752        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        10752        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-15 10:19 . 2013-09-15 10:19        1238528        ----a-w-        c:\windows\system32\d3d10.dll

2013-09-15 10:19 . 2013-09-15 10:19        648192        ----a-w-        c:\windows\system32\d3d10level9.dll

2013-09-15 10:19 . 2013-09-15 10:19        3419136        ----a-w-        c:\windows\SysWow64\d2d1.dll

2013-09-15 10:19 . 2013-09-15 10:19        333312        ----a-w-        c:\windows\system32\d3d10_1core.dll

2013-09-15 10:19 . 2013-09-15 10:19        293376        ----a-w-        c:\windows\SysWow64\dxgi.dll

2013-09-15 10:19 . 2013-09-15 10:19        245248        ----a-w-        c:\windows\system32\WindowsCodecsExt.dll

2013-09-15 10:19 . 2013-09-15 10:19        221184        ----a-w-        c:\windows\system32\UIAnimation.dll

2013-09-15 10:19 . 2013-09-15 10:19        1988096        ----a-w-        c:\windows\SysWow64\d3d10warp.dll

2013-09-15 10:19 . 2013-09-15 10:19        194560        ----a-w-        c:\windows\system32\d3d10_1.dll

2013-09-15 10:19 . 2013-09-15 10:19        187392        ----a-w-        c:\windows\SysWow64\UIAnimation.dll

2013-09-11 20:21 . 2013-09-11 20:21        863344        ----a-w-        c:\windows\SysWow64\msvcr110_clr0400.dll

2013-09-11 20:21 . 2013-09-11 20:21        501872        ----a-w-        c:\windows\SysWow64\msvcp110_clr0400.dll

2013-09-11 20:21 . 2013-09-11 20:21        28776        ----a-w-        c:\windows\SysWow64\aspnet_counters.dll

2013-09-11 20:21 . 2013-09-11 20:21        18000        ----a-w-        c:\windows\SysWow64\msvcr100_clr0400.dll

2013-09-11 18:39 . 2013-09-11 18:39        855664        ----a-w-        c:\windows\system32\msvcr110_clr0400.dll

2013-09-11 18:39 . 2013-09-11 18:39        614000        ----a-w-        c:\windows\system32\msvcp110_clr0400.dll

2013-09-11 18:39 . 2013-09-11 18:39        30312        ----a-w-        c:\windows\system32\aspnet_counters.dll

2013-09-11 18:39 . 2013-09-11 18:39        18000        ----a-w-        c:\windows\system32\msvcr100_clr0400.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Eintr�ge & legitime Standardeintr�ge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        130736        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        130736        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        130736        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        130736        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-09-25 20133824]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]

"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2012-06-08 296056]

"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2011-03-09 107816]

"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]

"BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2012-05-09 78312]

"Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2013-11-05 2237328]

.

c:\users\CADCAM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

8zlfqr2e.lnk - c:\windows\System32\rundll32.exe c:\progra~3\e2rqflz8.dss,FFZ0 [2009-7-14 45568]

Dropbox.lnk - c:\users\CADCAM\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]

ifgo0b.lnk - c:\windows\System32\rundll32.exe c:\progra~3\b0ogfi.dss,FFZ0 [2009-7-14 45568]

lw9lcvr.lnk - c:\windows\System32\rundll32.exe c:\progra~3\rvcl9wl.dss,FFZ0 [2009-7-14 45568]

odlbod1b.lnk - c:\windows\System32\rundll32.exe c:\progra~3\b1dobldo.dss,FFZ0 [2009-7-14 45568]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux5"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

R2 CLKMSVC10_38F51D56;CyberLink Product - 2013/06/09 20:47;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 MSICDSetup;MSICDSetup;e:\cdriver64.sys;e:\CDriver64.sys [x]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]

R3 OxPCIeSer;OxPCIeSer;c:\windows\system32\DRIVERS\OxPCIeSer.sys;c:\windows\SYSNATIVE\DRIVERS\OxPCIeSer.sys [x]

R3 OxPCIeSerMf;OxPCIeSerMf;c:\windows\system32\DRIVERS\OxPCIeMf.sys;c:\windows\SYSNATIVE\DRIVERS\OxPCIeMf.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]

S2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys;c:\windows\SYSNATIVE\Drivers\Sentinel64.sys [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

*Deregistered* - CLKMDRV10_38F51D56

.

Inhalt des "geplante Tasks" Ordners

.

2013-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-22 17:13]

.

2013-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-22 17:13]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]

@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"

[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]

2013-10-16 17:02        3358064        ----a-w-        c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]

@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"

[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]

2013-10-16 17:02        3358064        ----a-w-        c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]

@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"

[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]

2013-10-16 17:02        3358064        ----a-w-        c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        164016        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        164016        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        164016        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-05-25 00:36        164016        ----a-w-        c:\users\CADCAM\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2013-09-25 15:37        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-04-14 7714336]

"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-04-14 1833504]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-09-25 472984]

.

------- Zus�tzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 192.168.0.1

.

- - - - Entfernte verwaiste Registrierungseintr�ge - - - -

.

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-12-08  21:23:06 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-12-08 20:23

.

Vor Suchlauf: 11 Verzeichnis(se), 24.089.423.872 Bytes frei

Nach Suchlauf: 16 Verzeichnis(se), 35.212.709.888 Bytes frei

.

- - End Of File - - DDE09B78D0F310FD924B64F79B82595F

A36C5E4F47E84449FF07ED3517B43A31

War es das jetzt oder muss ich nochwas beachten?
Auf jeden Fall vielen Dank für die prompte Hilfe :applaus: sehr beeindruckend ! :daumenhoc