Trojaner-Board - Anhang in einer Email geöffnet, Zip-Datei ausversehen ausgeführt, jetzt deutliche Leistungseinbußen, Trojaner

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Anhang in einer Email geöffnet, Zip-Datei ausversehen ausgeführt, jetzt deutliche Leistungseinbußen, Trojaner (https://www.trojaner-board.de/156600-anhang-email-geoeffnet-zip-datei-ausversehen-ausgefuehrt-deutliche-leistungseinbussen-trojaner.html)

Anhang in einer Email geöffnet, Zip-Datei ausversehen ausgeführt, jetzt deutliche Leistungseinbußen, Trojaner

Guten Nachmittag,

seit einigen Tagen bemerkte ich deutliche Leistungsdefizite auf meinem Gaming Pc, Fps-Einstürze von 120 auf ca. 19Hz! Seit ich am letzen Montag, dann einen Anhang in einer Email aufgemacht hatte, aus Furcht eine tatsächliche Anklage oder einen Schufa-Eintrag zu erhalten, verhält sich mein PC noch seltsamer.

Zuerst machte sich ein Feld auf, nachdem ich die Zip-Datei öffnete und mich darum bat, das Programm auszuführen, welches angeblich durch Microsoft zertifiziert war...
Welche Folgen dieses stupide Ausführen hatte, ahnte ich nicht;
Der Bildschirm wurde zunächst schwarz und anschließend schaltete sich der PC ab.
Als ich schließlich meinen PC erneut hochfuhr, stellte ich auf Grund der Benachrichtigung meines abgelaufenen Bitdefender 2012- Antivirenprogramm fest, dass es ein bösartiges Programm geblockt hatte. Ich ließ anschließend Adware Cleaner_3.215 laufen und machte zunächst keinen erheblichen Befall bemerkbar, lediglich die Appdata/Chrome/Prefenrences Datei wurde gelöscht.
Als ich aber daraufhin, nach Internetrecherche herausfand, dass es sich um einen weit verbreiteten Trojaner handelte, der durch diese Drohmails versendet wird, lud ich mir auf Rat eines IT-Beraters 360 Internet Security herunter und ließ eine komplett Diagnose erstellen.
Zunächst fand dieses dann 4 Probleme, die unter Quarantäne gestellt wurden; Was mir aber besonders ins Auge stich, war, dass Adware Cleaner scheinbar eine Datei mit dem Namen trojan.generic in einer exe-Datei von mir fand.
Ich begab mich folglich im Internet auf die Suche dieses Problem zu suchen und downloadete YAC, um den Trojan zu beseitigen. Ohne Erfolg, denn diese fand ihn nicht.
Mit 360 hingegeben beseitigte ich die 4 befallenen Dateien, bin aber dennoch skeptisch, ob der Trojaner nun verschwunden sei, da ich im Internet gelesen hatte, dass es sich um einen sehr gefährlichen Trojaner handele, der sich immer wieder selbst generieren würde und von Zeit zu Zeit den gesamten PC lahmlegen würde.
Ich schätze, dass das Problem nicht gelöst ist, da mein PC (Stand von gestern) bei der Ordner Analyse von meinem 360 Internet Security bei ca. 44% Arbeitsspeicher-Auslastung arbeitete, während ich jetzt und ich habe wirklich nur die Analyse und das Internet nebenbei am Laufen, bei erstaunlichen 91% liege.

Ich mache mir wirklich Sorgen, ob ich meinen PC überhaupt noch retten kann und wende mich deshalb mit voller Hoffnung an die Trojaner-Board Community, da ich einfach mir nicht mehr zu helfen weiß!
Ich würde mich sehr freuen, Hilfe von euch zu erhalten und zeige mich aufgeschlossen und kooperativ, gemeinsam daran mitzuhelfen meinen PC zu retten, Danke im Voraus!!!

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Ok vielen Dank erstmal für die schnelle Antwort! Ich lade jetzt das Programm herunter!

Das Programm ist noch nicht ganz durch aber 360 hat gerade einen Trojaner gefunden in C.\Windows\mod_frst.exe
Name : Heur/Malware.QVM11.Gen
Soll ich ihn entfernen?

Ok hier sind die Dateien :
FRST.txt :

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01

Ran by Marco (administrator) on ALIENWARE on 18-07-2014 16:07:21

Running from C:\Users\Marco\Downloads

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rps.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfSdkS64.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe

() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rp.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\safemon\360Tray.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360sd.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe

() C:\Program Files (x86)\iSafe\ipcdl.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

(PC-Doctor, Inc.) C:\Program Files\AlienAutopsy\pcdrcui.exe

(PC-Doctor, Inc.) C:\Program Files\AlienAutopsy\pcdrrealtime.p5x

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeTray.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-16] (Alienware)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2780776 2011-07-19] (CANON INC.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3023600 2013-02-25] (Synaptics Incorporated)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)

HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)

HKLM-x32\...\Run: [Integrated Webcam Live! Central] => C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [577024 2012-03-07] (Creative Technology Ltd)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2557976 2014-06-24] (Sony Corporation)

HKLM-x32\...\Run: [bdruninstaller] => C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe [616256 2014-06-13] (Bitdefender)

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0

HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0

HKLM\...\Policies\Explorer: [HideSCAHealth] 0

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Run: [CAHeadless] => C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe [1401064 2014-05-11] (Adobe Systems Incorporated)

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Run: [DellSystemDetect] => C:\Users\Marco\AppData\Local\Apps\2.0\EEGJCZQT.A3M\H99ORQK4.O22\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe [262720 2014-06-21] (Dell)

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoCDBurning] 1

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [TaskbarNoNotification] 0

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [HideSCAHealth] 0

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * bddel.exe
 

==================== Internet (Whitelisted) ====================
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

SearchScopes: HKLM-x32 - DefaultScope value is missing.

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll No File

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @qq.com/TXSSO - C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [295608 2014-01-09] (Qihu 360 Software Co., Ltd.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-27] (Adobe Systems) [File not signed]

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

R2 CTAudSvcService; c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-20] (Creative Technology Ltd) [File not signed]

R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-28] (Creative Technology Ltd)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [118048 2014-07-16] (Elex do Brasil Participações Ltda)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-02] (Intel Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [481304 2014-06-24] (Sony Corporation)

R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed]

R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4241920 2013-05-17] (A-Volute) [File not signed]

S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L)

S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-08-26] (soft Xpansion)

R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [228800 2013-12-24] (Qihu 360 Software Co., Ltd.)
 

==================== Drivers (Whitelisted) ====================
 

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97480 2013-11-27] (Qihu 360 Software Co., Ltd.)

R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67272 2013-03-28] (Qihu 360 Software Co., Ltd.)

R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305856 2013-11-29] (Qihu 360 Software Co., Ltd.)

R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41152 2013-12-09] (Qihu 360 Software Co., Ltd.)

R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [286912 2013-12-24] (Qihu 360 Software Co., Ltd.)

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)

R1 BAPIDRV; C:\Windows\System32\Drivers\BAPIDRV64.SYS [179904 2013-12-10] (Qihu 360 Software Co., Ltd.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)

R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-28] (Creative Technology Ltd)

R1 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [247488 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlKit; C:\Program Files (x86)\iSafe\iSafeKrnlKit.sys [78016 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlR3; C:\Program Files (x86)\iSafe\iSafeKrnlR3.sys [65216 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [48640 2014-07-09] (Elex do Brasil Participações Ltda)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)

R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-05-17] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

U4 bdselfpr; 

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]

R3 PCDSRVC{0FF99CEB-15C9CE9E-06020200}_0; \??\c:\program files\alienautopsy\pcdsrvc_x64.pkms [X]

U4 vsserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-18 16:05 - 2014-07-18 16:05 - 00000000 __SHD () C:\360Rec

2014-07-18 16:04 - 2014-07-18 16:05 - 00021812 _____ () C:\Users\Marco\Downloads\Addition.txt

2014-07-18 16:02 - 2014-07-18 16:07 - 00026031 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-18 16:02 - 2014-07-18 16:07 - 00000000 ____D () C:\FRST

2014-07-18 16:00 - 2014-07-18 16:01 - 02086912 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-18 10:04 - 2014-07-18 10:04 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-18 10:04 - 2014-07-18 10:04 - 00000000 _____ () C:\Windows\setupact.log

2014-07-17 22:17 - 2014-07-17 22:17 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\eCyber

2014-07-17 22:16 - 2014-07-18 15:09 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-17 22:16 - 2014-07-17 22:16 - 00001782 _____ () C:\Users\Public\Desktop\YAC.lnk

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-18 16:02 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:13 - 2014-07-17 22:14 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-18 10:05 - 00001811 _____ () C:\Windows\WindowsUpdate.log

2014-07-17 22:02 - 2014-07-17 22:04 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:31 - 2014-07-17 21:32 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:16 - 2014-07-17 21:16 - 00001560 _____ () C:\ProgramData\1405624570.bdinstall.bin

2014-07-17 21:15 - 2014-07-17 21:15 - 00070210 _____ () C:\ProgramData\1405624173.bdinstall.bin

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 20:43 - 2014-07-17 20:43 - 00190467 _____ () C:\ProgramData\1405622140.bdinstall.bin

2014-07-17 20:34 - 2014-07-17 20:35 - 07040416 _____ () C:\Users\Marco\Downloads\bitdefender_antivirus.exe

2014-07-17 17:49 - 2014-07-17 21:16 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\ProgramData\360SD

2014-07-17 17:49 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys

2014-07-17 17:49 - 2013-03-28 04:11 - 00067272 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:48 - 2013-12-24 11:27 - 00286912 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys

2014-07-17 17:48 - 2013-12-10 05:49 - 00179904 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS

2014-07-17 17:48 - 2013-12-09 04:04 - 00041152 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys

2014-07-17 17:48 - 2013-11-29 09:55 - 00305856 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys

2014-07-17 17:48 - 2013-11-27 14:10 - 00097480 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:37 - 2014-07-17 17:44 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 14:57 - 2014-06-13 02:19 - 00609056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-07-16 14:33 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:58 - 00450904 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys

2014-07-16 14:33 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-07-16 14:33 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-07-16 14:33 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:39 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:24 - 2014-07-16 21:48 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-10 15:49 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 15:49 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 15:49 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 15:49 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 15:49 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 15:49 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 15:49 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 15:49 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 15:49 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 15:49 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 15:49 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 15:49 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 15:49 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 15:49 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 15:49 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 15:49 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 15:49 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 15:49 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 15:49 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 15:49 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 15:49 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 15:49 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 15:49 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 15:49 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 15:49 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 15:49 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 15:49 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 15:48 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 15:48 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 15:48 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 15:48 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 15:48 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 15:48 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 15:48 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-06-28 22:07 - 2014-06-28 22:15 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:54 - 2014-06-22 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-22 09:53 - 2014-06-22 09:54 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-22 09:53 - 2014-06-22 09:54 - 00000000 ____D () C:\Program Files\iTunes

2014-06-22 09:53 - 2014-06-22 09:54 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-22 09:53 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iPod

2014-06-21 11:03 - 2014-06-27 20:47 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag

2014-06-20 12:42 - 2014-07-17 21:27 - 00000000 ____D () C:\AdwCleaner

2014-06-20 12:42 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-18 16:07 - 2014-07-18 16:02 - 00026031 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-18 16:07 - 2014-07-18 16:02 - 00000000 ____D () C:\FRST

2014-07-18 16:05 - 2014-07-18 16:05 - 00000000 __SHD () C:\360Rec

2014-07-18 16:05 - 2014-07-18 16:04 - 00021812 _____ () C:\Users\Marco\Downloads\Addition.txt

2014-07-18 16:02 - 2014-07-17 22:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-18 16:01 - 2014-07-18 16:00 - 02086912 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-18 15:42 - 2012-12-01 03:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-18 15:18 - 2013-01-12 16:13 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-18 15:09 - 2014-07-17 22:16 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-18 10:05 - 2014-07-17 22:04 - 00001811 _____ () C:\Windows\WindowsUpdate.log

2014-07-18 10:04 - 2014-07-18 10:04 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-18 10:04 - 2014-07-18 10:04 - 00000000 _____ () C:\Windows\setupact.log

2014-07-18 10:03 - 2013-05-22 22:19 - 00003460 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask

2014-07-18 02:14 - 2013-01-12 16:14 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-18 02:05 - 2013-01-01 12:32 - 00000000 ____D () C:\Users\Marco\AppData\Local\Adobe

2014-07-17 22:17 - 2014-07-17 22:17 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\eCyber

2014-07-17 22:16 - 2014-07-17 22:16 - 00001782 _____ () C:\Users\Public\Desktop\YAC.lnk

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:14 - 2014-07-17 22:13 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-17 22:02 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:36 - 2012-12-01 03:29 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:32 - 2014-07-17 21:31 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:29 - 2013-02-14 14:38 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\TS3Client

2014-07-17 21:27 - 2014-06-20 12:42 - 00000000 ____D () C:\AdwCleaner

2014-07-17 21:18 - 2013-01-12 16:13 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-17 21:17 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-17 21:17 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-17 21:16 - 2014-07-17 21:16 - 00001560 _____ () C:\ProgramData\1405624570.bdinstall.bin

2014-07-17 21:16 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-17 21:15 - 2014-07-17 21:15 - 00070210 _____ () C:\ProgramData\1405624173.bdinstall.bin

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 21:14 - 2013-06-22 15:18 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender

2014-07-17 21:09 - 2012-12-01 03:26 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn

2014-07-17 21:08 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks

2014-07-17 21:08 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks

2014-07-17 21:07 - 2012-11-30 19:58 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-07-17 21:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-17 20:43 - 2014-07-17 20:43 - 00190467 _____ () C:\ProgramData\1405622140.bdinstall.bin

2014-07-17 20:35 - 2014-07-17 20:34 - 07040416 _____ () C:\Users\Marco\Downloads\bitdefender_antivirus.exe

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\ProgramData\360SD

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:44 - 2014-07-17 17:37 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:12 - 2010-11-21 08:50 - 00699666 _____ () C:\Windows\system32\perfh007.dat

2014-07-17 16:12 - 2010-11-21 08:50 - 00149774 _____ () C:\Windows\system32\perfc007.dat

2014-07-17 16:12 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:37 - 2012-12-01 03:25 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 22:34 - 2012-12-16 17:50 - 00000000 ____D () C:\Users\Marco\AppData\Local\Deployment

2014-07-16 21:48 - 2014-07-15 18:24 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-16 14:57 - 2012-12-01 03:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-07-16 14:57 - 2012-12-01 03:26 - 00000000 ____D () C:\Temp

2014-07-16 14:57 - 2012-11-30 19:58 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-16 14:53 - 2012-11-30 19:57 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-16 14:02 - 2013-06-22 16:17 - 00000376 _____ () C:\Users\Marco\AppData\Roamingprivacy.xml

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:41 - 2014-07-15 18:39 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:24 - 2013-10-31 13:07 - 00008654 _____ () C:\Windows\system32\bddel.dat

2014-07-11 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-07-11 11:48 - 2014-05-06 21:47 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 11:48 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-10 23:14 - 2013-08-15 17:07 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 23:13 - 2012-12-15 20:23 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 19:57 - 2013-10-05 13:34 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-07-09 17:42 - 2012-12-01 03:04 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-09 17:42 - 2012-12-01 03:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 17:42 - 2012-12-01 03:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-08 16:20 - 2013-01-27 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2014-07-07 20:30 - 2012-12-10 23:34 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype

2014-07-04 17:41 - 2012-12-01 03:31 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-07-04 13:34 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-03 20:09 - 2013-12-11 19:05 - 00000000 ____D () C:\Users\Marco\AppData\Local\Battle.net

2014-07-03 16:12 - 2013-05-26 16:43 - 00000000 ___RD () C:\Users\Marco\Desktop\Sims 3

2014-07-03 16:11 - 2014-04-10 18:47 - 00000000 ____D () C:\Users\Marco\Desktop\Dolmetscheinsatz 23.04-25.04

2014-07-03 16:09 - 2013-12-11 19:07 - 00000000 ____D () C:\Program Files (x86)\Hearthstone

2014-07-03 15:44 - 2013-06-22 20:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-06-30 20:52 - 2012-12-20 22:18 - 00000000 ____D () C:\Users\Marco\AppData\Local\Windows Live

2014-06-30 18:13 - 2013-12-11 19:05 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-06-30 04:09 - 2014-07-10 15:49 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 15:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-29 15:16 - 2014-04-20 21:42 - 00002065 _____ () C:\Users\Public\Desktop\PlayMemories Home-Hilfe.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002203 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002179 _____ () C:\Users\Public\Desktop\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home

2014-06-29 13:07 - 2012-12-10 17:44 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Adobe

2014-06-28 22:15 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-28 22:09 - 2012-12-10 17:12 - 00000000 ____D () C:\Users\Marco

2014-06-27 20:47 - 2014-06-21 11:03 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag

2014-06-27 20:47 - 2014-05-15 17:49 - 00000000 ____D () C:\Users\Marco\Desktop\Filmprojekt

2014-06-23 21:13 - 2013-01-12 16:13 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-23 21:13 - 2013-01-12 16:13 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-22 10:29 - 2012-12-01 03:31 - 00000000 ____D () C:\ProgramData\Adobe

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:54 - 2014-06-22 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-22 09:54 - 2014-06-22 09:53 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-22 09:54 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iTunes

2014-06-22 09:54 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-22 09:53 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iPod

2014-06-21 11:58 - 2012-12-11 18:54 - 00000000 ____D () C:\ProgramData\Origin

2014-06-21 10:47 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries

2014-06-21 09:36 - 2012-12-11 18:54 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-06-20 22:14 - 2014-07-10 15:49 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-06-20 21:39 - 2014-07-10 15:49 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-06-20 12:44 - 2012-12-13 23:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-20 01:17 - 2012-12-23 13:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-06-19 03:39 - 2014-07-10 15:48 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-19 03:06 - 2014-07-10 15:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-06-19 03:06 - 2014-07-10 15:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-19 02:48 - 2014-07-10 15:49 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-19 02:42 - 2014-07-10 15:49 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-06-19 02:42 - 2014-07-10 15:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-19 02:41 - 2014-07-10 15:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-19 02:41 - 2014-07-10 15:48 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-06-19 02:32 - 2014-07-10 15:49 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-19 02:31 - 2014-07-10 15:49 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-19 02:26 - 2014-07-10 15:49 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-06-19 02:24 - 2014-07-10 15:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-19 02:24 - 2014-07-10 15:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-19 02:23 - 2014-07-10 15:49 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-19 02:16 - 2014-07-10 15:49 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-19 02:14 - 2014-07-10 15:48 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-06-19 02:09 - 2014-07-10 15:49 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-19 01:59 - 2014-07-10 15:49 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-06-19 01:56 - 2014-07-10 15:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-06-19 01:53 - 2014-07-10 15:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-19 01:51 - 2014-07-10 15:49 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-19 01:50 - 2014-07-10 15:49 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-19 01:48 - 2014-07-10 15:49 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-19 01:39 - 2014-07-10 15:49 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-19 01:38 - 2014-07-10 15:49 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-06-19 01:37 - 2014-07-10 15:49 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-19 01:36 - 2014-07-10 15:49 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-19 01:35 - 2014-07-10 15:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-06-19 01:33 - 2014-07-10 15:49 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-19 01:32 - 2014-07-10 15:49 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-19 01:28 - 2014-07-10 15:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-19 01:28 - 2014-07-10 15:49 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-19 01:27 - 2014-07-10 15:49 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-19 01:27 - 2014-07-10 15:49 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-06-19 01:25 - 2014-07-10 15:49 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-06-19 01:23 - 2014-07-10 15:49 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-19 01:22 - 2014-07-10 15:49 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-19 01:12 - 2014-07-10 15:49 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-19 01:06 - 2014-07-10 15:49 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-06-19 01:01 - 2014-07-10 15:49 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-19 00:59 - 2014-07-10 15:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-19 00:58 - 2014-07-10 15:49 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-19 00:58 - 2014-07-10 15:49 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-19 00:52 - 2014-07-10 15:49 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-19 00:51 - 2014-07-10 15:49 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-19 00:49 - 2014-07-10 15:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-19 00:46 - 2014-07-10 15:49 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-06-19 00:45 - 2014-07-10 15:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-19 00:35 - 2014-07-10 15:49 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-19 00:34 - 2014-07-10 15:49 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-19 00:15 - 2014-07-10 15:49 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-19 00:13 - 2014-07-10 15:49 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-19 00:09 - 2014-07-10 15:49 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-19 00:07 - 2014-07-10 15:49 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-18 04:18 - 2014-07-10 15:49 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-06-18 03:51 - 2014-07-10 15:49 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-06-18 03:10 - 2014-07-10 15:49 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-18 06:00
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

und hier die Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-07-2014 01

Ran by Marco at 2014-07-18 16:09:09

Running from C:\Users\Marco\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Bitdefender Virenschutz (Disabled - Out of date) {98CD50CE-5097-4098-9669-6C401FB3969C}

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

AS: Bitdefender Spyware-Schutz (Disabled - Out of date) {23ACB12A-76AD-4F16-ACD9-57326434DC21}

FW: Bitdefender Firewall (Disabled) {A0F6D1EB-1AF8-41C0-BD36-C575E160D1E7}
 

==================== Installed Programs ======================
 

360 Internet Security (HKLM-x32\...\360 Internet Security) (Version: 4.9.0.4900 - Qihu 360 Software Co., Ltd.)

Adobe After Effects 7.0 (HKLM-x32\...\Adobe After Effects 7.0) (Version: 7.0.0.244 - Adobe Systems, Inc.)

Adobe After Effects 7.0 (x32 Version: 7.0.0.244 - Adobe Systems, Inc.) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden

Adobe Bridge 1.0 (x32 Version: 1.0.1.1 - Adobe Systems) Hidden

Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden

Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)

Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden

Adobe ExtendScript Toolkit 1.0 (x32 Version: 001.000.002 - Adobe Systems) Hidden

Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Help Center 2.0 (x32 Version: 2.0.0 - Adobe Systems) Hidden

Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.1.0.0 - Adobe Systems Incorporated)

Adobe Photoshop Elements 12 (x32 Version: 12.1.0.0 - Adobe Systems Incorporated) Hidden

Adobe Premiere Elements 12 (HKLM\...\PremElem120) (Version: 12.1.0.0 - Adobe Systems Incorporated)

Adobe Premiere Elements 12 (Version: 12.0 - Adobe Systems Incorporated) Hidden

Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)

Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden

Adobe Stock Photos 1.0 (x32 Version: 1.0.2 - Adobe Systems) Hidden

Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)

AlienAutopsy (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)

AlienRespawn - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Alienware)

AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Alienware)

Alienware Command Center (HKLM-x32\...\InstallShield_{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}) (Version: 2.8.8.0 - Alienware Corp.)

Alienware Command Center (Version: 2.8.8.0 - Alienware Corp.) Hidden

Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Ashampoo Burning Studio 2013 v.11.0.5 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)

Ashampoo WinOptimizer 2013 v.1.0.0 (HKLM-x32\...\{4209F371-7B85-60AD-E5CE-E4409D39E3DE}_is1) (Version: 1.00.00 - Ashampoo GmbH & Co. KG)

AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - )

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version:  - )

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version:  - )

Canon MP Navigator EX 5.1 (HKLM-x32\...\MP Navigator EX 5.1) (Version:  - )

Canon MX430 series Benutzerregistrierung (HKLM-x32\...\Canon MX430 series Benutzerregistrierung) (Version:  - )

Canon MX430 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX430_series) (Version:  - )

Canon MX430 series On-screen Manual (HKLM-x32\...\Canon MX430 series On-screen Manual) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)

CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )

Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.8.1.1 - Dell)

Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)

Die Sims™ 3 Design-Garten-Accessoires (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.0.55 - Electronic Arts)

Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)

Die Sims™ 3 Inselparadies (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)

Die Sims™ 3 Into the Future (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)

Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)

Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)

Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)

Die Sims™ 3 Reiseabenteuer (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)

Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)

Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)

Dropbox (HKCU\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)

Elements 12 Organizer (x32 Version: 12.0 - Ihr Firmenname) Hidden

EMSC (x32 Version: 0.0.0.22C - Compal Electronics, Inc.) Hidden

ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)

Flixster (HKLM-x32\...\com.wb.DC2) (Version: 2.2.2 - Warner Bros. Entertainment, Inc.)

Flixster (x32 Version: 2.2.2 - Warner Bros. Entertainment, Inc.) Hidden

Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Drive (HKLM-x32\...\{75939021-3B68-419D-8DC1-E9823BFF9658}) (Version: 1.16.7009.9618 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Integrated Webcam Live! Central (HKLM-x32\...\Integrated Webcam Live! Central) (Version: 2.01.15 - Creative Technology Ltd)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)

Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

MergeModule_x64 (Version: 8.0.00 - Sony Corporation) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4631.1002 - Microsoft Corporation)

Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 17.0.2003.1112 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

NVIDIA 3D Vision Controller-Treiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.43 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.43 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden

NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.1.3.2637 - Electronic Arts, Inc.)

Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

PlayMemories Home (HKLM-x32\...\{6F26A633-ACC2-4850-82C5-60A06D606175}) (Version: 3.1.20.06241 - Sony Corporation)

Qualcomm Atheros Killer Network Manager (HKLM-x32\...\InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}) (Version: 6.1.0.304 - Qualcomm Atheros)

Qualcomm Atheros Killer Network Manager (Version: 6.1.0.304 - Qualcomm Atheros) Hidden

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.08.24 - Razer Inc.)

Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.11.3 - Razer Inc.)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.28094 - Realtek Semiconductor Corp.)

Rosetta Stone Homeschool (HKLM-x32\...\{331F15D5-490D-4280-BDE6-5C0F295D8EE1}) (Version: 3.4.5 - Rosetta Stone Ltd.)

s3oc - Sims3 Object Cloner (HKLM-x32\...\s3oc) (Version: 13-1029-1343 - Peter L Jones)

s3pe - Sims3 Package Editor (HKLM-x32\...\s3pe) (Version: 13-0902-2048 - Peter L Jones)

Screen Recording Suite V2.5.0 (HKLM-x32\...\{EB9F3F92-4857-4121-AA6F-1C424AC6C266}_is1) (Version: 2.5.0 - Apowersoft)

SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden

SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 2.0.0.0 - Electronic Arts)

Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden

Sound Blaster Recon3Di (HKLM-x32\...\{C8AAFCDC-CD3A-40AD-9FA9-07FB70F08224}) (Version: 1.00.08 - Creative Technology Limited)

Sound Blaster Recon3Di Extras (HKLM-x32\...\{C45E715E-442E-4D82-BD46-A08A0870957C}) (Version: 1.0 - Creative Technology Limited)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.15.1 - Synaptics Incorporated)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)

WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2410 - Broadcom Corporation)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

Yet Another Cleaner! (HKLM-x32\...\iSafe) (Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA)
 

==================== Restore Points  =========================
 

18-07-2014 04:07:12 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {132DA160-9C67-442E-96EC-83DC716744BE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-12] (Google Inc.)

Task: {1BCD1575-2D4A-442A-AFF0-EF4B3523A6B0} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\AlienAutopsy\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)

Task: {1C975C38-EFB3-494D-9ED0-5472847AB5B6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-06-19] (Microsoft Corporation)

Task: {201009AE-8DD2-417C-8A1C-693C10120901} - System32\Tasks\AdobeAAMUpdater-1.0-Alienware-Marco => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {57644F5B-8461-4DAD-8EE8-B0B64BCBE3FE} - \Dealply No Task File <==== ATTENTION

Task: {5B62C5E4-8E6A-4FFD-BD3B-D1AC46C02EA1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

Task: {5DF7B999-BC08-4EA1-8606-A99CD6361AEC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {78DEE664-3B5C-43F9-9E35-08262E8AEC8A} - System32\Tasks\{1C20FA2A-0C4B-429D-8FAA-A5F85296477D} => Chrome.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsProgressBar

Task: {96949D65-92B5-4648-8769-0593077F4A85} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-12] (Google Inc.)

Task: {DF41FBDC-F0B6-4ED6-8CFE-DFC18A36A7E7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)

Task: {ED832937-3D13-49A0-9302-346D7027A88D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe

Task: {EF8A11E1-6A51-4BA4-89F9-77AD6408855A} - \Freemium1ClickMaint No Task File <==== ATTENTION

Task: {F510DEA6-8737-4830-8398-13B7F4032D1E} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)

Task: {FAEBF698-E017-4DD2-B0F3-FB3478138822} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\AlienAutopsy\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-11-30 19:58 - 2014-06-13 04:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-19 18:23 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2013-06-22 20:44 - 2011-09-06 04:02 - 00140456 ____N () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2012-02-15 22:37 - 2012-02-15 22:37 - 00492032 ____N () C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

2011-05-10 03:46 - 2011-05-10 03:46 - 02760192 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtCore4.dll

2011-05-10 03:56 - 2011-05-10 03:56 - 09856000 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtGui4.dll

2011-05-10 03:47 - 2011-05-10 03:47 - 00416256 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtXml4.dll

2012-02-15 22:37 - 2012-02-15 22:37 - 00217600 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\BFCommon.dll

2011-05-10 19:32 - 2011-05-10 19:32 - 00731648 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\qwt5.dll

2011-05-10 03:48 - 2011-05-10 03:48 - 00990720 _____ () C:\Program Files\Bigfoot Networks\Killer Network Manager\QtNetwork4.dll

2012-12-01 03:26 - 2012-01-27 05:49 - 02751808 ____N () C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE

2014-07-17 22:16 - 2014-07-16 11:34 - 02228896 _____ () C:\Program Files (x86)\iSafe\ipcdl.exe

2014-01-31 22:52 - 2014-01-31 22:52 - 00541432 _____ () C:\Program Files\AlienAutopsy\libAsapiCSharp.dll

2014-01-31 22:52 - 2014-01-31 22:52 - 00103160 _____ () C:\Program Files\AlienAutopsy\libCSharpCommonCS.dll

2014-01-31 22:52 - 2014-01-31 22:52 - 00090872 _____ () C:\Program Files\AlienAutopsy\libTonopahClientCSharp.dll

2014-01-31 22:52 - 2014-01-31 22:52 - 00086776 _____ () C:\Program Files\AlienAutopsy\libDataStoreCSharp.dll

2014-01-31 22:52 - 2014-01-31 22:52 - 00049912 _____ () C:\Program Files\AlienAutopsy\libDiskScannerCSharp.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\Windows:nlsPreferences

AlternateDataStreams: C:\ProgramData\Temp:2683706C
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Qualcomm Atheros Killer Network Manager.lnk => C:\Windows\pss\Qualcomm Atheros Killer Network Manager.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Marco^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Marco^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup

MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: DellSystemDetect => C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms

MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/18/2014 03:26:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0

Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530, Zeitstempel: 0x5156646c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0006dd76

ID des fehlerhaften Prozesses: 0x1e5c

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (07/17/2014 09:09:28 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)

Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
 

Error: (07/17/2014 08:42:09 PM) (Source: MsiInstaller) (EventID: 11310) (User: Alienware)

Description: Produkt: Bitdefender Total Security 2012 -- Error 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\f9a9f9.rbf.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.
 

Error: (07/17/2014 07:10:02 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0

Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530, Zeitstempel: 0x5156646c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0006dd76

ID des fehlerhaften Prozesses: 0x1834

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 

Error: (07/17/2014 05:46:53 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 

Error: (07/17/2014 05:46:53 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung.
 
 

System errors:

=============

Error: (07/17/2014 11:59:41 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (07/17/2014 09:19:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.179.95.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT59
 

        Aktualisierungsphase: 4.5.0216.00
 

        Quellpfad: 4.5.0216.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (07/17/2014 09:11:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Sicherheitscenter" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1079
 

Error: (07/17/2014 09:09:57 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
 

Error: (07/17/2014 09:07:58 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

bdfwfpf
 

Error: (07/17/2014 09:06:46 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 

Error: (07/17/2014 08:43:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "bdfwfpf" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/17/2014 08:36:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "BitDefender Virus Shield" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (07/17/2014 07:18:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Sicherheitscenter" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1079
 

Error: (07/17/2014 05:50:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Sicherheitscenter" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1079
 
 

Microsoft Office Sessions:

=========================

Error: (07/18/2014 03:26:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: LolClient.exe0.0.0.0515663e0Adobe AIR.dll3.7.0.15305156646cc00000050006dd761e5c01cfa28847e99865C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.100\deploy\LolClient.exeC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.100\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dll0eac7269-0e7f-11e4-a7d0-20689d633b88
 

Error: (07/17/2014 09:09:28 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/17/2014 08:42:09 PM) (Source: MsiInstaller) (EventID: 11310) (User: Alienware)

Description: Produkt: Bitdefender Total Security 2012 -- Error 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\f9a9f9.rbf.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 07:10:02 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: LolClient.exe0.0.0.0515663e0Adobe AIR.dll3.7.0.15305156646cc00000050006dd76183401cfa1e007fac81bC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.100\deploy\LolClient.exeC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.100\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dll2fdd518c-0dd5-11e4-be18-20689d633b88
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 05:46:54 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 05:46:53 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/17/2014 05:46:53 PM) (Source: MsiInstaller) (EventID: 11404) (User: Alienware)

Description: Produkt: Bitdefender 2012 -- Error 1404. Schlüssel konnte nicht gelöscht werden: \SOFTWARE\Bitdefender\Bitdefender 2012\15.0.25.  Systemfehler . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen, oder setzen Sie sich mit dem Supportpersonal in Verbindung. (NULL)(NULL)(NULL)(NULL)(NULL)
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-07-17 16:05:21.799

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 22:58:23.778

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 22:40:07.761

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 21:48:46.928

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 17:22:06.331

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 15:00:38.392

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 14:52:18.189

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 14:29:28.982

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 14:01:58.145

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-07-16 13:25:06.819

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00244_038\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 87%

Total physical RAM: 6094.31 MB

Available physical RAM: 766.59 MB

Total Pagefile: 12186.8 MB

Available Pagefile: 5228.1 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:456.98 GB) (Free:245.11 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 16B1246F)

Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)

Partition 2: (Active) - (Size=9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

!Update! 19.07, 21:29Uhr
Nach dem Löschen der befallenen Datei Heur/Malware.QVM11.Gen nun sichtbare Verbesserung der Leistungswerte, jedoch dennoch Verdacht auf Trojaner-Befall.
Befürchte trotz, dass meine Anti-Virenprogramme bei Diagnose keinen Alarm schlagen, einen Virus/Trojaner/Wurm.

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Nabend, vielen Dank für die Antwort!

"Gemeckert hat das Programm am Anfang am Microsoft Security Essetials Dienst, den ich vor dem durchlaufen des Programs gelöscht habe.
Anschließend nachdem er durch war und neugestartet hatte, trat die angekündigete Fehlermeldung bezüglich
C:\Program Files\360\360 Internet Security\360rp.exe auf.

Code:

ComboFix 14-07-19.01 - Marco 20.07.2014  17:37:58.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6094.3885 [GMT 2:00]

ausgeführt von:: c:\users\Marco\Downloads\ComboFix.exe

Hier die Log-Files
 
 

AV: Bitdefender Virenschutz *Disabled/Outdated* {98CD50CE-5097-4098-9669-6C401FB3969C}

AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}

FW: Bitdefender Firewall *Disabled* {A0F6D1EB-1AF8-41C0-BD36-C575E160D1E7}

SP: Bitdefender Spyware-Schutz *Disabled/Outdated* {23ACB12A-76AD-4F16-ACD9-57326434DC21}

SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.
  ADS - Windows: deleted 192 bytes in 1 streams. 

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\360Rec

c:\programdata\1371907161.bdinstall.bin

c:\programdata\1405622140.bdinstall.bin

c:\programdata\1405624173.bdinstall.bin

c:\programdata\1405624570.bdinstall.bin

c:\programdata\AAED182D6F.sys

c:\programdata\Alienware

c:\programdata\Alienware\CommandCenter\AlienAdrenaline\Profiles.xml

c:\programdata\PCDr\6426\AddOnDownloaded\073fb38f-0e69-479d-bca1-4f81ec9dcbf6.dll

c:\programdata\PCDr\6426\AddOnDownloaded\0d06f79c-d0e6-4610-9a2b-d8f1a48f4252.dll

c:\programdata\PCDr\6426\AddOnDownloaded\2eccd5d6-e118-4f76-97b6-ba56fb6c597a.dll

c:\programdata\PCDr\6426\AddOnDownloaded\3972fea3-214c-4935-a7d1-96bf66115683.dll

c:\programdata\PCDr\6426\AddOnDownloaded\3a79f062-8f3e-464f-9815-2c45840494ee.dll

c:\programdata\PCDr\6426\AddOnDownloaded\50441041-9037-4c34-842c-4a8523e700da.dll

c:\programdata\PCDr\6426\AddOnDownloaded\51fdf16e-ecb9-4fa4-8469-76fc9a22293b.dll

c:\programdata\PCDr\6426\AddOnDownloaded\57d7325c-8462-4866-a9ca-3f9228775fed.dll

c:\programdata\PCDr\6426\AddOnDownloaded\8d357f17-07ad-4392-ba06-fb67564c98cd.dll

c:\programdata\PCDr\6426\AddOnDownloaded\ae67b364-b69e-471e-b177-2459120b84d4.dll

c:\programdata\PCDr\6426\AddOnDownloaded\b9ce760f-6209-48f2-a4a3-695324591c45.dll

c:\programdata\PCDr\6426\AddOnDownloaded\ba005e12-3139-4327-9f7a-9f2ea6a6c841.dll

c:\programdata\PCDr\6426\AddOnDownloaded\c6bf01ba-05a7-4930-b8dd-7c5fd03e97ac.dll

c:\programdata\PCDr\6426\AddOnDownloaded\ca774ae5-4b38-4aba-8d90-7f29dc095dfb.dll

c:\programdata\PCDr\6426\AddOnDownloaded\d1f4dc82-bc4c-4916-b37c-3ab9c30ae468.dll

c:\programdata\PCDr\6426\AddOnDownloaded\dfc97e68-74cd-4807-807f-ac146d81ec5d.dll

c:\programdata\PCDr\6426\AddOnDownloaded\e5a71f43-c979-4b3d-a544-9ed1dc6dc4c8.dll

c:\programdata\PCDr\6426\AddOnDownloaded\e9bb45d9-5a2b-47e8-9c48-168276d422cc.dll

c:\programdata\PCDr\6426\AddOnDownloaded\f04a4d58-1eb6-4e35-b4b4-db6bab11e49b.dll

c:\programdata\PCDr\6426\AddOnDownloaded\f12de547-df4d-4236-9129-baac054f90ab.dll

c:\programdata\PCDr\6426\AddOnDownloaded\f9dc840b-c6f7-42a5-acec-50cc7a2827fd.dll

c:\users\Marco\AppData\Roaming\Microsoft\~DFK7ae29.tmp

c:\users\Marco\AppData\Roaming\Microsoft\1eaadjc.dll

c:\users\Marco\AppData\Roaming\Microsoft\bass.dll

c:\users\Marco\AppData\Roaming\Microsoft\engine_vx.dll

c:\users\Marco\AppData\Roaming\Microsoft\kfgresk.dll

c:\users\Marco\AppData\Roaming\Microsoft\peaadje.dll

c:\users\Marco\AppData\Roaming\Microsoft\qwadjb.dll

c:\users\Marco\AppData\Roaming\Microsoft\rsaadjd.dll

c:\windows\SysWow64\SET2B2F.tmp

c:\windows\SysWow64\SET3AED.tmp

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-06-20 bis 2014-07-20  ))))))))))))))))))))))))))))))

.

.

2014-07-18 14:02 . 2014-07-18 14:10        --------        d-----w-        C:\FRST

2014-07-18 04:05 . 2014-07-14 02:12        10924376        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{086A2EF0-297E-42D6-BD81-55B814EE662C}\mpengine.dll

2014-07-17 20:17 . 2014-07-17 20:17        --------        d-----w-        c:\users\Marco\AppData\Roaming\eCyber

2014-07-17 20:16 . 2014-07-17 20:16        --------        d-----w-        c:\windows\system32\log

2014-07-17 20:16 . 2014-07-20 15:51        --------        d-----w-        c:\program files (x86)\iSafe

2014-07-17 20:14 . 2014-07-20 10:37        --------        d-----w-        c:\users\Marco\AppData\Roaming\iSafe

2014-07-17 19:32 . 2014-07-17 19:32        --------        d-----w-        c:\program files\CPUID

2014-07-17 19:15 . 2014-07-17 19:15        --------        d-----w-        c:\program files\Bitdefender

2014-07-17 18:35 . 2014-07-17 18:35        --------        d-----w-        c:\program files (x86)\Common Files\Bitdefender

2014-07-17 15:49 . 2013-12-06 12:03        22584        ----a-w-        c:\windows\system32\drivers\efimon.sys

2014-07-17 15:49 . 2014-07-17 15:49        --------        d-----w-        c:\users\Marco\AppData\Roaming\360SD

2014-07-17 15:49 . 2014-04-23 08:32        67664        ----a-w-        c:\windows\system32\drivers\360AvFlt.sys

2014-07-17 15:49 . 2014-07-18 16:59        --------        d-----w-        c:\programdata\360SD

2014-07-17 15:49 . 2014-07-17 19:16        --------        d-----w-        c:\users\Marco\AppData\Roaming\360safe

2014-07-17 15:48 . 2014-05-07 09:44        304208        ----a-w-        c:\windows\system32\drivers\360FsFlt.sys

2014-07-17 15:48 . 2014-04-29 03:50        41552        ----a-w-        c:\windows\system32\drivers\360Camera64.sys

2014-07-17 15:48 . 2014-04-21 06:38        97872        ----a-w-        c:\windows\system32\drivers\360AntiHacker64.sys

2014-07-17 15:48 . 2014-04-18 06:42        180816        ----a-w-        c:\windows\system32\drivers\BAPIDRV64.SYS

2014-07-17 15:48 . 2014-07-17 15:48        --------        d-----r-        C:\360SANDBOX

2014-07-17 15:48 . 2014-04-29 06:20        305744        ----a-w-        c:\windows\system32\drivers\360Box64.sys

2014-07-17 15:45 . 2014-07-17 15:45        --------        d-----w-        c:\program files\360

2014-07-17 14:08 . 2014-07-17 14:08        1670872        ----a-w-        c:\windows\system32\bda9DF5.tmp

2014-07-16 12:57 . 2014-06-13 00:19        609056        ----a-w-        c:\windows\SysWow64\nvStreaming.exe

2014-07-16 12:02 . 2014-07-16 12:02        --------        d-----w-        c:\programdata\Riot Games

2014-07-15 16:39 . 2014-07-15 16:41        --------        d-----w-        c:\users\Marco\AppData\Roaming\Dropbox

2014-07-15 16:24 . 2014-07-16 19:48        --------        d-----w-        c:\programdata\AVAST Software

2014-07-10 13:48 . 2014-06-19 01:40        871936        ----a-w-        c:\program files\Internet Explorer\iedvtool.dll

2014-07-10 13:48 . 2014-06-18 22:23        360960        ----a-w-        c:\program files\Internet Explorer\IEShims.dll

2014-07-10 13:48 . 2014-06-20 20:14        293048        ----a-w-        c:\program files\Internet Explorer\sqmapi.dll

2014-07-10 13:48 . 2014-06-19 00:41        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll

2014-07-10 13:48 . 2014-06-18 23:53        195584        ----a-w-        c:\windows\system32\msrating.dll

2014-07-10 13:48 . 2014-06-19 01:39        23464448        ----a-w-        c:\windows\system32\mshtml.dll

2014-07-10 13:48 . 2014-06-19 00:14        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2014-07-10 13:48 . 2014-06-18 23:50        977408        ----a-w-        c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll

2014-07-10 13:48 . 2014-06-05 14:45        1460736        ----a-w-        c:\windows\system32\lsasrv.dll

2014-07-10 13:48 . 2014-06-05 14:26        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2014-07-10 13:48 . 2014-06-05 14:25        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

2014-06-22 07:53 . 2014-07-20 08:23        --------        d-----w-        c:\program files\iPod

2014-06-22 07:53 . 2014-07-20 08:23        --------        d-----w-        c:\program files\iTunes

2014-06-22 07:53 . 2014-07-20 08:23        --------        d-----w-        c:\program files (x86)\iTunes

2014-06-22 07:53 . 2014-06-22 07:54        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-07-10 21:13 . 2012-12-15 18:23        96441528        ----a-w-        c:\windows\system32\MRT.exe

2014-07-09 15:42 . 2012-12-01 01:04        71344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-07-09 15:42 . 2012-12-01 01:04        699056        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2014-06-13 02:58 . 2014-04-15 09:14        1542088        ----a-w-        c:\windows\system32\nvir3dgenco64.dll

2014-06-13 02:47 . 2012-12-01 02:47        14497528        ----a-w-        c:\windows\SysWow64\nvd3dum.dll

2014-06-13 02:47 . 2012-12-01 02:47        18625768        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2014-06-13 02:46 . 2012-12-01 02:47        2814120        ----a-w-        c:\windows\SysWow64\nvapi.dll

2014-06-13 02:45 . 2012-12-01 02:47        3196304        ----a-w-        c:\windows\system32\nvapi64.dll

2014-06-13 02:11 . 2012-11-30 17:58        6783960        ----a-w-        c:\windows\system32\nvcpl.dll

2014-06-13 02:11 . 2012-11-30 17:58        3523360        ----a-w-        c:\windows\system32\nvsvc64.dll

2014-06-13 02:11 . 2012-11-30 17:58        933208        ----a-w-        c:\windows\system32\nvvsvc.exe

2014-06-13 02:11 . 2012-11-30 17:58        62808        ----a-w-        c:\windows\system32\nvshext.dll

2014-06-13 02:11 . 2012-11-30 17:58        387528        ----a-w-        c:\windows\system32\nvmctray.dll

2014-06-13 02:11 . 2012-11-30 17:58        2560968        ----a-w-        c:\windows\system32\nvsvcr.dll

2014-06-06 17:40 . 2014-04-15 09:37        3802247        ----a-w-        c:\windows\system32\nvcoproc.bin

2014-06-03 08:41 . 2013-10-05 11:41        589008        ----a-w-        c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe

2014-05-29 23:07 . 2014-06-02 14:12        1291232        ----a-w-        c:\windows\SysWow64\nvspbridge.dll

2014-05-29 23:07 . 2013-10-28 17:33        1122312        ----a-w-        c:\windows\SysWow64\nvspcap.dll

2014-05-29 23:07 . 2014-06-02 14:12        1715176        ----a-w-        c:\windows\system32\nvspbridge64.dll

2014-05-29 23:07 . 2013-10-28 17:33        1279480        ----a-w-        c:\windows\system32\nvspcap64.dll

2014-05-20 02:44 . 2014-05-27 14:35        1889112        ----a-w-        c:\windows\system32\nvdispco6433788.dll

2014-05-20 02:44 . 2014-05-27 14:35        1541576        ----a-w-        c:\windows\system32\nvdispgenco6433788.dll

2014-05-08 09:32 . 2014-06-11 19:57        3178496        ----a-w-        c:\windows\system32\rdpcorets.dll

2014-05-08 09:32 . 2014-06-11 19:57        16384        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll

2014-04-25 02:34 . 2014-06-11 19:57        801280        ----a-w-        c:\windows\system32\usp10.dll

2014-04-25 02:06 . 2014-06-11 19:57        626688        ----a-w-        c:\windows\SysWow64\usp10.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-10-05 11:52        222712        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-10-05 11:52        222712        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-10-05 11:52        222712        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DellSystemDetect"="c:\users\Marco\AppData\Local\Apps\2.0\EEGJCZQT.A3M\H99ORQK4.O22\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe" [2014-06-21 262720]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-30 284440]

"Sound Blaster Recon3Di Control Panel"="c:\program files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" [2011-12-21 880640]

"Integrated Webcam Live! Central"="c:\program files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe" [2012-03-06 577024]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2011-08-04 1637496]

"IJNetworkScannerSelectorEX"="c:\program files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" [2011-09-27 439440]

"PMBVolumeWatcher"="c:\program files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe" [2014-06-24 2557976]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-2-22 1380128]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 0 (0x0)

"NoFileAssociate"= 0 (0x0)

"TaskbarNoNotification"= 0 (0x0)

"HideSCAHealth"= 0 (0x0)

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"TaskbarNoNotification"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *bddel.exe

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages        REG_MULTI_SZ           scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

.

R2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 360AvFlt;360AvFlt mini-filter driver;c:\windows\system32\DRIVERS\360AvFlt.sys;c:\windows\SYSNATIVE\DRIVERS\360AvFlt.sys [x]

R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]

R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]

R3 dcdbas;System Management Driver;c:\windows\system32\DRIVERS\dcdbas64.sys;c:\windows\SYSNATIVE\DRIVERS\dcdbas64.sys [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 iSafeKrnlBoot;iSafeKrnl Boot Driver;c:\windows\system32\DRIVERS\iSafeKrnlBoot.sys;c:\windows\SYSNATIVE\DRIVERS\iSafeKrnlBoot.sys [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 SOHDs;Sony Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]

R3 SXDS10;soft Xpansion Dispatch Service;c:\program files (x86)\Common Files\soft Xpansion\sxds10.exe \Service;c:\program files (x86)\Common Files\soft Xpansion\sxds10.exe \Service [x]

R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS;c:\windows\SYSNATIVE\DRIVERS\EMSC.SYS [x]

S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\drivers\PxHlpa64.sys [x]

S1 360AntiHacker;360Safe Anti Hacker Service;c:\windows\system32\Drivers\360AntiHacker64.sys;c:\windows\SYSNATIVE\Drivers\360AntiHacker64.sys [x]

S1 360Box64;360Box mini-filter driver;c:\windows\system32\DRIVERS\360Box64.sys;c:\windows\SYSNATIVE\DRIVERS\360Box64.sys [x]

S1 360Camera;360Safe Camera Filter Service;c:\windows\system32\Drivers\360Camera64.sys;c:\windows\SYSNATIVE\Drivers\360Camera64.sys [x]

S1 360fsflt;360FsFlt mini-filter driver;c:\windows\system32\DRIVERS\360FsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\360FsFlt.sys [x]

S1 BAPIDRV;BAPIDRV;c:\windows\system32\DRIVERS\BAPIDRV64.sys;c:\windows\SYSNATIVE\DRIVERS\BAPIDRV64.sys [x]

S1 BfLwf;Bigfoot Networks Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]

S1 iSafeKrnl;iSafeKrnl Mini-Filter Driver;c:\program files (x86)\iSafe\iSafeKrnl.sys;c:\program files (x86)\iSafe\iSafeKrnl.sys [x]

S1 iSafeKrnlKit;iSafeKrnl Kit Driver;c:\program files (x86)\iSafe\iSafeKrnlKit.sys;c:\program files (x86)\iSafe\iSafeKrnlKit.sys [x]

S1 iSafeKrnlR3;iSafeKrnl Ring3 Driver;c:\program files (x86)\iSafe\iSafeKrnlR3.sys;c:\program files (x86)\iSafe\iSafeKrnlR3.sys [x]

S1 iSafeNetFilter;iSafeNetFilter NDIS Driver;c:\program files (x86)\iSafe\iSafeNetFilter.sys;c:\program files (x86)\iSafe\iSafeNetFilter.sys [x]

S2 360rp;360 Internet Security Real-time Protection Loading Service;c:\program files\360\360 Internet Security\360rps.exe;c:\program files\360\360 Internet Security\360rps.exe [x]

S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]

S2 ClickToRunSvc;Microsoft Office-Klick-und-Los-Dienst;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]

S2 CtHdaSvc;Sound Core3D Service;c:\windows\sysWow64\CtHdaSvc.exe;c:\windows\sysWow64\CtHdaSvc.exe [x]

S2 DfSdkS;Defragmentation-Service;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]

S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]

S2 iSafeService;iSafeService;c:\program files (x86)\iSafe\iSafeSvc.exe;c:\program files (x86)\iSafe\iSafeSvc.exe [x]

S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]

S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]

S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [x]

S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe [x]

S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]

S2 SftService;SoftThinks Agent Service;c:\program files (x86)\AlienRespawn\sftservice.EXE;c:\program files (x86)\AlienRespawn\sftservice.EXE [x]

S2 SOHDms;Sony Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S2 ZhuDongFangYu;Proactive Defence;c:\program files\360\360 Internet Security\deepscan\QHActiveDefense.exe;c:\program files\360\360 Internet Security\deepscan\QHActiveDefense.exe [x]

S3 Ak27x64;Killer Wireless-N 1102 device driver;c:\windows\system32\DRIVERS\Ak27x64.sys;c:\windows\SYSNATIVE\DRIVERS\Ak27x64.sys [x]

S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]

S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]

S3 cthda;Sound Core3D(CtHda.sys);c:\windows\system32\drivers\cthda.sys;c:\windows\SYSNATIVE\drivers\cthda.sys [x]

S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]

S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]

S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]

S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys;c:\windows\SYSNATIVE\DRIVERS\nvstusb.sys [x]

S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]

S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]

S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]

S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-07-17 19:19        1104200        ----a-w-        c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2014-07-20 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-01 15:42]

.

2014-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-12 14:13]

.

2014-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-12 14:13]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-10-05 11:52        261624        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-10-05 11:52        261624        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-10-05 11:52        261624        ----a-w-        c:\users\Marco\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2014-06-10 10:07        2335960        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2014-06-10 10:07        2335960        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2014-06-10 10:07        2335960        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2014-06-27 12:20        777032        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Command Center Controllers"="c:\program files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [2012-06-15 12656]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2011-07-19 2780776]

"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2352072]

"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-05-29 1279480]

"360sd"="c:\program files\360\360 Internet Security\360sdrun.exe" [2014-04-16 287560]

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:blank

uDefault_Page_URL = about:blank

mStart Page = about:blank

mDefault_Page_URL = about:blank

uInternet Settings,ProxyOverride = *.local

IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

Trusted Zone: dell.com

TCP: DhcpNameServer = 192.168.178.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

URLSearchHooks-{5786d022-540e-4699-b350-b4be0ae94b79} - (no file)

Toolbar-Locked - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

Toolbar-Locked - (no file)

ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.14"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*3* **jT\LanguagePairs]

"2052"="A3 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*3* *yr'Y\LanguagePairs]

"2052"="A3 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*3* *yr'Y*jT\LanguagePairs]

"2052"="A3 ????"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*4* **R'Y\LanguagePairs]

"2052"="A4 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*4* **jT\LanguagePairs]

"2052"="A4 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*4* *yr'Y\LanguagePairs]

"2052"="A4 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*5* **jT\LanguagePairs]

"2052"="A5 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\A*5* *yr'Y\LanguagePairs]

"2052"="A5 ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\B*5* *(*I*S*O*)* *yr'Y\LanguagePairs]

"2052"="B5 (ISO) ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\B*5* *(*J*I*S*)* **jT\LanguagePairs]

"2052"="B5 (JIS) ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\C*a*b*i*n*e*t* *:\ø[]

"FormKeyword"=hex:48,50,5f,43,41,42,49,4e,45,54,3a,48,50,00

"ResourceNameID"="@hpzstwn7.dll,3397"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\E* *:\ø[]

"FormKeyword"=hex:45,5f,53,48,45,45,54,3a,48,50,00

"ResourceNameID"="@hpzstlhn.dll,3398"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\T*a*b*l*o*i*d* *yr'Y\LanguagePairs]

"2052"="Tabloid ??"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\·_ýVhÆQ *F*a*n*f*o*l*d*\LanguagePairs]

"2052"="???? Fanfold"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\·_ýVÕl‹_N(u¸~ *F*a*n*f*o*l*d*\LanguagePairs]

"2052"="??????? Fanfold"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\àe¹LugqGr *L*ÿ&^ÁˆjR¹        ÿ]

"FormKeyword"=hex:48,50,5f,42,4f,52,44,45,52,4c,45,53,53,5f,50,48,4f,54,4f,5f,

   4c,5f,57,54,3a,48,50,00

"ResourceNameID"="@hpzstwn7.dll,3394"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\XIUFENG-PC\Forms\ŽýVhÆQ *F*a*n*f*o*l*d*\LanguagePairs]

"2052"="???? Fanfold"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo hier die mbam.txt :

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 20.07.2014 21:01:59, SYSTEM, ALIENWARE, Protection, Malware Protection, Starting, 

Protection, 20.07.2014 21:01:59, SYSTEM, ALIENWARE, Protection, Malware Protection, Started, 

Protection, 20.07.2014 21:02:00, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Starting, 

Protection, 20.07.2014 21:02:00, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Started, 

Update, 20.07.2014 21:08:53, SYSTEM, ALIENWARE, Scheduler, Rootkit Database, 2014.2.20.1, 2014.7.17.1, 

Update, 20.07.2014 21:09:00, SYSTEM, ALIENWARE, Scheduler, Malware Database, 2014.3.4.9, 2014.7.20.5, 

Protection, 20.07.2014 21:09:01, SYSTEM, ALIENWARE, Protection, Refresh, Starting, 

Protection, 20.07.2014 21:09:01, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Stopping, 

Protection, 20.07.2014 21:09:01, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Stopped, 

Protection, 20.07.2014 21:09:14, SYSTEM, ALIENWARE, Protection, Refresh, Success, 

Protection, 20.07.2014 21:09:14, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Starting, 

Protection, 20.07.2014 21:09:14, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Started, 

Protection, 20.07.2014 21:35:28, SYSTEM, ALIENWARE, Protection, Malware Protection, Starting, 

Protection, 20.07.2014 21:35:28, SYSTEM, ALIENWARE, Protection, Malware Protection, Started, 

Protection, 20.07.2014 21:35:28, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Starting, 

Protection, 20.07.2014 21:36:59, SYSTEM, ALIENWARE, Protection, Malicious Website Protection, Started, 
 

(end)

Hier die Files von AdwareCleaner :

Code:

# AdwCleaner v3.216 - Bericht erstellt am 20/07/2014 um 21:41:11

# Aktualisiert 17/07/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Marco - ALIENWARE

# Gestartet von : C:\Users\Marco\Desktop\SoftwareCC\Sicherheit\adwcleaner_3.216.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

[!] Ordner Gelöscht : C:\Program Files (x86)\iSafe

Ordner Gelöscht : C:\Users\Marco\AppData\Roaming\eCyber

Ordner Gelöscht : C:\Users\Marco\AppData\Roaming\iSafe
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\Software\iSafe

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17207
 
 

-\\ Google Chrome v36.0.1985.125
 

[ Datei : C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [10325 octets] - [20/06/2014 12:42:29]

AdwCleaner[R1].txt - [946 octets] - [25/06/2014 18:14:46]

AdwCleaner[R2].txt - [1065 octets] - [29/06/2014 16:55:27]

AdwCleaner[R3].txt - [1170 octets] - [02/07/2014 18:40:13]

AdwCleaner[R4].txt - [1310 octets] - [04/07/2014 15:46:25]

AdwCleaner[R5].txt - [1430 octets] - [15/07/2014 16:06:06]

AdwCleaner[R6].txt - [1527 octets] - [15/07/2014 18:39:14]

AdwCleaner[R7].txt - [1607 octets] - [16/07/2014 17:17:29]

AdwCleaner[R8].txt - [1707 octets] - [17/07/2014 21:26:05]

AdwCleaner[R9].txt - [2170 octets] - [20/07/2014 21:40:40]

AdwCleaner[S0].txt - [9720 octets] - [20/06/2014 12:44:17]

AdwCleaner[S1].txt - [1006 octets] - [25/06/2014 18:15:39]

AdwCleaner[S2].txt - [1127 octets] - [29/06/2014 16:56:11]

AdwCleaner[S3].txt - [1232 octets] - [02/07/2014 18:52:34]

AdwCleaner[S4].txt - [1372 octets] - [04/07/2014 16:36:07]

AdwCleaner[S5].txt - [1492 octets] - [15/07/2014 17:51:24]

AdwCleaner[S6].txt - [1668 octets] - [16/07/2014 17:19:05]

AdwCleaner[S7].txt - [2000 octets] - [20/07/2014 21:41:11]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [2060 octets] ##########

JRT-Files :

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.3 (03.23.2014:1)

OS: Windows 7 Home Premium x64

Ran by Marco on 20.07.2014 at 22:12:34,14

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 

Failed to stop: [Service] isafekrnl 

Failed to stop: [Service] isafeservice 
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-814131446-2973363421-1144175548-1001\Software\ib updater

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-814131446-2973363421-1144175548-1001\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\backupstack_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dmwu_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dmwu_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softwareupdater_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softwareupdater_rasmancs
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"

Successfully deleted: [Folder] "C:\Users\Marco\AppData\Roaming\isafe"

Failed to delete: [Folder] "C:\Program Files (x86)\isafe"
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 20.07.2014 at 22:19:28,00

Computer was rebooted

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST-Files :
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014

Ran by Marco (administrator) on ALIENWARE on 20-07-2014 22:42:02

Running from C:\Users\Marco\Downloads

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 

Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rps.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfSdkS64.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeTray.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Dell) C:\Users\Marco\AppData\Local\Apps\2.0\EEGJCZQT.A3M\H99ORQK4.O22\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe

() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360sd.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rp.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\safemon\360Tray.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

() C:\Program Files (x86)\iSafe\ipcdl.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-16] (Alienware)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2780776 2011-07-19] (CANON INC.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3023600 2013-02-25] (Synaptics Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart 

HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [287560 2014-04-16] (Qihu 360 Software Co., Ltd.)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)

HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)

HKLM-x32\...\Run: [Integrated Webcam Live! Central] => C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [577024 2012-03-07] (Creative Technology Ltd)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2557976 2014-06-24] (Sony Corporation)

HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0

HKLM\...\Policies\Explorer: [HideSCAHealth] 0

HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Run: [DellSystemDetect] => C:\Users\Marco\AppData\Local\Apps\2.0\EEGJCZQT.A3M\H99ORQK4.O22\dell..tion_0f612f649c4a10af_0005.000 (the data entry has 40 more characters).

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoCDBurning] 1

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [TaskbarNoNotification] 0

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * bddel.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files\360\360 Internet Security\safemon\safemon64.dll (Qihu 360 Software Co., Ltd.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} ->  No File

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @qq.com/TXSSO - C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 

Chrome: 

=======

CHR HomePage: about:blank

CHR StartupUrls: "about:blank"

CHR DefaultSearchKeyword: google

CHR DefaultNewTabURL: 

CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [310352 2014-04-16] (Qihu 360 Software Co., Ltd.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-27] (Adobe Systems) [File not signed]

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

R2 CTAudSvcService; c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-20] (Creative Technology Ltd) [File not signed]

R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-28] (Creative Technology Ltd)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [118048 2014-07-16] (Elex do Brasil Participações Ltda)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-02] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [481304 2014-06-24] (Sony Corporation)

R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed]

R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4241920 2013-05-17] (A-Volute) [File not signed]

S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L)

S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-08-26] (soft Xpansion)

R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [236360 2014-04-23] (Qihu 360 Software Co., Ltd.)
 

==================== Drivers (Whitelisted) ====================
 

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97872 2014-04-21] (Qihu 360 Software Co., Ltd.)

R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67664 2014-04-23] (Qihu 360 Software Co., Ltd.)

R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305744 2014-04-29] (Qihu 360 Software Co., Ltd.)

R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41552 2014-04-29] (Qihu 360 Software Co., Ltd.)

R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [304208 2014-05-07] (Qihu 360 Software Co., Ltd.)

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [180816 2014-04-18] (Qihu 360 Software Co., Ltd.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)

R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-28] (Creative Technology Ltd)

R1 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [247488 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlKit; C:\Program Files (x86)\iSafe\iSafeKrnlKit.sys [78016 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlR3; C:\Program Files (x86)\iSafe\iSafeKrnlR3.sys [65216 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [48640 2014-07-09] (Elex do Brasil Participações Ltda)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-20] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)

R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-05-17] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

U4 bdselfpr; 

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]

U4 vsserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-20 22:40 - 2014-07-20 22:40 - 00000000 ____D () C:\Users\Marco\Downloads\FRST-OlderVersion

2014-07-20 22:19 - 2014-07-20 22:19 - 00002039 _____ () C:\Users\Marco\Downloads\JRT.txt

2014-07-20 22:13 - 2014-07-20 22:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-20 22:01 - 2014-07-20 22:01 - 01016261 _____ (Thisisu) C:\Users\Marco\Downloads\JRT.exe

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 __SHD () C:\360Rec

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-20 21:38 - 2014-07-20 21:38 - 00001664 _____ () C:\Users\Marco\Downloads\mbam1.txt

2014-07-20 21:02 - 2014-07-20 22:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-20 21:01 - 2014-07-20 21:01 - 00001104 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-20 21:01 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-20 21:01 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-20 21:00 - 2014-07-20 21:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Marco\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-20 17:56 - 2014-07-20 17:56 - 00042460 _____ () C:\ComboFix.txt

2014-07-20 17:36 - 2014-07-20 17:56 - 00000000 ____D () C:\ComboFix

2014-07-20 17:36 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-20 17:36 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-20 17:36 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-20 17:32 - 2014-07-20 17:56 - 00000000 ____D () C:\Qoobox

2014-07-20 17:32 - 2014-07-20 17:54 - 00000000 ____D () C:\Windows\erdnt

2014-07-20 17:30 - 2014-07-20 17:31 - 05222180 ____R (Swearware) C:\Users\Marco\Downloads\ComboFix.exe

2014-07-20 10:23 - 2014-07-20 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-07-20 10:19 - 2014-07-20 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-07-18 19:00 - 2014-07-18 19:00 - 00000031 _____ () C:\Windows\360sd.ini

2014-07-18 18:53 - 2014-07-20 22:12 - 00002744 _____ () C:\Windows\setupact.log

2014-07-18 18:53 - 2014-07-20 22:11 - 00321288 _____ () C:\Windows\PFRO.log

2014-07-18 18:53 - 2014-07-18 18:53 - 03408288 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-18 18:53 - 2014-07-18 18:53 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-18 16:02 - 2014-07-20 22:42 - 00026616 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-18 16:02 - 2014-07-20 22:42 - 00000000 ____D () C:\FRST

2014-07-18 16:00 - 2014-07-20 22:40 - 02089984 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-17 22:16 - 2014-07-20 22:18 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:13 - 2014-07-17 22:14 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-20 22:15 - 00087922 _____ () C:\Windows\WindowsUpdate.log

2014-07-17 22:02 - 2014-07-17 22:04 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:31 - 2014-07-17 21:32 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 17:49 - 2014-07-20 22:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-17 17:49 - 2014-07-18 18:59 - 00000000 ____D () C:\ProgramData\360SD

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:49 - 2014-04-23 10:32 - 00067664 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys

2014-07-17 17:49 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:48 - 2014-05-07 11:44 - 00304208 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys

2014-07-17 17:48 - 2014-04-29 08:20 - 00305744 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys

2014-07-17 17:48 - 2014-04-29 05:50 - 00041552 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys

2014-07-17 17:48 - 2014-04-21 08:38 - 00097872 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys

2014-07-17 17:48 - 2014-04-18 08:42 - 00180816 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:37 - 2014-07-17 17:44 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 14:57 - 2014-06-13 02:19 - 00609056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-07-16 14:33 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:58 - 00450904 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys

2014-07-16 14:33 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-07-16 14:33 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-07-16 14:33 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:39 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:24 - 2014-07-16 21:48 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-10 15:49 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 15:49 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 15:49 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 15:49 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 15:49 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 15:49 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 15:49 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 15:49 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 15:49 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 15:49 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 15:49 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 15:49 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 15:49 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 15:49 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 15:49 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 15:49 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 15:49 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 15:49 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 15:49 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 15:49 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 15:49 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 15:49 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 15:49 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 15:49 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 15:49 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 15:49 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 15:49 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 15:48 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 15:48 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 15:48 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 15:48 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 15:48 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 15:48 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 15:48 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-06-28 22:07 - 2014-06-28 22:15 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files\iTunes

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files\iPod

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-22 09:53 - 2014-06-22 09:54 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-21 11:03 - 2014-06-27 20:47 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag

2014-06-20 12:42 - 2014-07-20 21:41 - 00000000 ____D () C:\AdwCleaner

2014-06-20 12:42 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-20 22:42 - 2014-07-18 16:02 - 00026616 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-20 22:42 - 2014-07-18 16:02 - 00000000 ____D () C:\FRST

2014-07-20 22:42 - 2012-12-01 03:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-20 22:40 - 2014-07-20 22:40 - 00000000 ____D () C:\Users\Marco\Downloads\FRST-OlderVersion

2014-07-20 22:40 - 2014-07-18 16:00 - 02089984 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-20 22:40 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-20 22:27 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks

2014-07-20 22:27 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks

2014-07-20 22:27 - 2012-12-01 03:26 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn

2014-07-20 22:19 - 2014-07-20 22:19 - 00002039 _____ () C:\Users\Marco\Downloads\JRT.txt

2014-07-20 22:19 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-20 22:19 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-20 22:18 - 2014-07-17 22:16 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-20 22:18 - 2013-01-12 16:13 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-20 22:15 - 2014-07-17 22:04 - 00087922 _____ () C:\Windows\WindowsUpdate.log

2014-07-20 22:14 - 2014-07-20 22:13 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-20 22:13 - 2014-07-20 21:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-20 22:12 - 2014-07-18 18:53 - 00002744 _____ () C:\Windows\setupact.log

2014-07-20 22:12 - 2013-01-12 16:13 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-20 22:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-20 22:11 - 2014-07-18 18:53 - 00321288 _____ () C:\Windows\PFRO.log

2014-07-20 22:11 - 2012-11-30 19:58 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-07-20 22:01 - 2014-07-20 22:01 - 01016261 _____ (Thisisu) C:\Users\Marco\Downloads\JRT.exe

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 __SHD () C:\360Rec

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-20 21:41 - 2014-06-20 12:42 - 00000000 ____D () C:\AdwCleaner

2014-07-20 21:38 - 2014-07-20 21:38 - 00001664 _____ () C:\Users\Marco\Downloads\mbam1.txt

2014-07-20 21:01 - 2014-07-20 21:01 - 00001104 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Marco\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-20 19:18 - 2013-02-14 14:38 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\TS3Client

2014-07-20 18:03 - 2010-11-21 08:50 - 00699666 _____ () C:\Windows\system32\perfh007.dat

2014-07-20 18:03 - 2010-11-21 08:50 - 00149774 _____ () C:\Windows\system32\perfc007.dat

2014-07-20 18:03 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-20 17:59 - 2012-12-16 17:50 - 00000000 ____D () C:\Users\Marco\AppData\Local\Apps\2.0

2014-07-20 17:57 - 2012-12-10 17:12 - 00000000 ____D () C:\Users\Marco\AppData\Local\SoftThinks

2014-07-20 17:56 - 2014-07-20 17:56 - 00042460 _____ () C:\ComboFix.txt

2014-07-20 17:56 - 2014-07-20 17:36 - 00000000 ____D () C:\ComboFix

2014-07-20 17:56 - 2014-07-20 17:32 - 00000000 ____D () C:\Qoobox

2014-07-20 17:56 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-20 17:54 - 2014-07-20 17:32 - 00000000 ____D () C:\Windows\erdnt

2014-07-20 17:51 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-20 17:36 - 2012-12-10 17:54 - 00001912 _____ () C:\Windows\epplauncher.mif

2014-07-20 17:31 - 2014-07-20 17:30 - 05222180 ____R (Swearware) C:\Users\Marco\Downloads\ComboFix.exe

2014-07-20 10:27 - 2013-05-22 22:19 - 00003460 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask

2014-07-20 10:23 - 2014-07-20 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iTunes

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iPod

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-07-20 10:19 - 2014-07-20 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-07-20 10:19 - 2013-07-14 11:31 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-07-20 02:00 - 2013-01-01 12:32 - 00000000 ____D () C:\Users\Marco\AppData\Local\Adobe

2014-07-19 21:35 - 2012-12-11 18:54 - 00000000 ____D () C:\ProgramData\Origin

2014-07-19 21:06 - 2012-12-11 18:54 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-07-18 19:00 - 2014-07-18 19:00 - 00000031 _____ () C:\Windows\360sd.ini

2014-07-18 18:59 - 2014-07-17 17:49 - 00000000 ____D () C:\ProgramData\360SD

2014-07-18 18:53 - 2014-07-18 18:53 - 03408288 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-18 18:53 - 2014-07-18 18:53 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-18 02:14 - 2013-01-12 16:14 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:14 - 2014-07-17 22:13 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-17 22:02 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:36 - 2012-12-01 03:29 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:32 - 2014-07-17 21:31 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 21:14 - 2013-06-22 15:18 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:44 - 2014-07-17 17:37 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:37 - 2012-12-01 03:25 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 22:34 - 2012-12-16 17:50 - 00000000 ____D () C:\Users\Marco\AppData\Local\Deployment

2014-07-16 21:48 - 2014-07-15 18:24 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-16 14:57 - 2012-12-01 03:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-07-16 14:57 - 2012-12-01 03:26 - 00000000 ____D () C:\Temp

2014-07-16 14:57 - 2012-11-30 19:58 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-16 14:53 - 2012-11-30 19:57 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-16 14:02 - 2013-06-22 16:17 - 00000376 _____ () C:\Users\Marco\AppData\Roamingprivacy.xml

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:41 - 2014-07-15 18:39 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:24 - 2013-10-31 13:07 - 00008654 _____ () C:\Windows\system32\bddel.dat

2014-07-11 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-07-11 11:48 - 2014-05-06 21:47 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 11:48 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-10 23:14 - 2013-08-15 17:07 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 23:13 - 2012-12-15 20:23 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 19:57 - 2013-10-05 13:34 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-07-09 17:42 - 2012-12-01 03:04 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-09 17:42 - 2012-12-01 03:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 17:42 - 2012-12-01 03:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-08 16:20 - 2013-01-27 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2014-07-07 20:30 - 2012-12-10 23:34 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype

2014-07-04 17:41 - 2012-12-01 03:31 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-07-04 13:34 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-03 20:09 - 2013-12-11 19:05 - 00000000 ____D () C:\Users\Marco\AppData\Local\Battle.net

2014-07-03 16:12 - 2013-05-26 16:43 - 00000000 ___RD () C:\Users\Marco\Desktop\Sims 3

2014-07-03 16:11 - 2014-04-10 18:47 - 00000000 ____D () C:\Users\Marco\Desktop\Dolmetscheinsatz 23.04-25.04

2014-07-03 16:09 - 2013-12-11 19:07 - 00000000 ____D () C:\Program Files (x86)\Hearthstone

2014-07-03 15:44 - 2013-06-22 20:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-06-30 20:52 - 2012-12-20 22:18 - 00000000 ____D () C:\Users\Marco\AppData\Local\Windows Live

2014-06-30 18:13 - 2013-12-11 19:05 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-06-30 04:09 - 2014-07-10 15:49 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 15:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-29 15:16 - 2014-04-20 21:42 - 00002065 _____ () C:\Users\Public\Desktop\PlayMemories Home-Hilfe.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002203 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002179 _____ () C:\Users\Public\Desktop\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home

2014-06-29 13:07 - 2012-12-10 17:44 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Adobe

2014-06-28 22:15 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-28 22:09 - 2012-12-10 17:12 - 00000000 ____D () C:\Users\Marco

2014-06-27 20:47 - 2014-06-21 11:03 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag

2014-06-27 20:47 - 2014-05-15 17:49 - 00000000 ____D () C:\Users\Marco\Desktop\Filmprojekt

2014-06-23 21:13 - 2013-01-12 16:13 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-23 21:13 - 2013-01-12 16:13 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-22 10:29 - 2012-12-01 03:31 - 00000000 ____D () C:\ProgramData\Adobe

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:54 - 2014-06-22 09:53 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-21 10:47 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries

2014-06-20 22:14 - 2014-07-10 15:49 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-06-20 21:39 - 2014-07-10 15:49 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-06-20 12:44 - 2012-12-13 23:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-06-20 01:17 - 2012-12-23 13:15 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
 

Some content of TEMP:

====================

C:\Users\Marco\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-18 06:00
 

==================== End Of Log ============================

--- --- ---

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Nabend, hier endlich die Log-Files :

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=598a8073fb55244393e3602b3ae63e83

# engine=19277

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-07-21 08:33:01

# local_time=2014-07-21 10:33:01 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 88479 157604631 0 0

# compatibility_mode_1='360 Internet Security'

# compatibility_mode=16386 16777213 100 98 15496 44700188 0 0

# scanned=591167

# found=4

# cleaned=0

# scan_time=15114

sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"

sh=0144DAD6530EDBF83280FF7B7ACE933567C6AF13 ft=1 fh=1852f3471a1c93e3 vn="Win32/AdWare.Yontoo.F Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe.vir"

sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"

sh=ACF9E9D055517B6571FB5EF39869632F5C85A2D5 ft=1 fh=c3303b6c2148f14d vn="Variante von MSIL/WebCake.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Marco\AppData\Roaming\Yontoo\YontooDesktop.exe.vir"

Hier jetzt das zweite Log-File :

Code:

 Results of screen317's Security Check version 0.99.85  

 Windows 7 Service Pack 1 x64 (UAC is disabled!)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

360 Internet Security   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Yet Another Cleaner!   

 Java 7 Update 55  

 Java version out of Date! 

 Adobe Reader 10.1.10 Adobe Reader out of Date!  

 Google Chrome 35.0.1916.153  

 Google Chrome 36.0.1985.125  
 ````````Process Check: objlist.exe by Laurent````````  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

und hier letztlich das FRST Log-File :

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014

Ran by Marco (administrator) on ALIENWARE on 21-07-2014 22:42:52

Running from C:\Users\Marco\Downloads

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe

(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rps.exe

(Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfSdkS64.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe

(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Program Files (x86)\iSafe\ipcdl.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe

() C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe

(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-16] (Alienware)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2780776 2011-07-19] (CANON INC.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3023600 2013-02-25] (Synaptics Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart 

HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [287560 2014-04-16] (Qihu 360 Software Co., Ltd.)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)

HKLM-x32\...\Run: [Sound Blaster Recon3Di Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [880640 2011-12-21] (Creative Technology Ltd)

HKLM-x32\...\Run: [Integrated Webcam Live! Central] => C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe [577024 2012-03-07] (Creative Technology Ltd)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2557976 2014-06-24] (Sony Corporation)

HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0

HKLM\...\Policies\Explorer: [HideSCAHealth] 0

HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Run: [DellSystemDetect] => C:\Users\Marco\AppData\Local\Apps\2.0\EEGJCZQT.A3M\H99ORQK4.O22\dell..tion_0f612f649c4a10af_0005.000 (the data entry has 40 more characters).

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoCDBurning] 1

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [TaskbarNoNotification] 0

HKU\S-1-5-21-814131446-2973363421-1144175548-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * bddel.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files\360\360 Internet Security\safemon\safemon64.dll (Qihu 360 Software Co., Ltd.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} ->  No File

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @qq.com/TXSSO - C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 

Chrome: 

=======

CHR HomePage: about:blank

CHR StartupUrls: "about:blank"

CHR DefaultSearchKeyword: google

CHR DefaultNewTabURL: 

CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [310352 2014-04-16] (Qihu 360 Software Co., Ltd.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-27] (Adobe Systems) [File not signed]

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-12-01] (Creative Labs) [File not signed]

R2 CTAudSvcService; c:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-20] (Creative Technology Ltd) [File not signed]

R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122880 2012-03-28] (Creative Technology Ltd)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [118048 2014-07-16] (Elex do Brasil Participações Ltda)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-02] (Intel Corporation)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [481304 2014-06-24] (Sony Corporation)

R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-15] () [File not signed]

R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4241920 2013-05-17] (A-Volute) [File not signed]

S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L)

S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-08-26] (soft Xpansion)

R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [236360 2014-04-23] (Qihu 360 Software Co., Ltd.)
 

==================== Drivers (Whitelisted) ====================
 

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97872 2014-04-21] (Qihu 360 Software Co., Ltd.)

R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67664 2014-04-23] (Qihu 360 Software Co., Ltd.)

R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305744 2014-04-29] (Qihu 360 Software Co., Ltd.)

R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41552 2014-04-29] (Qihu 360 Software Co., Ltd.)

R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [304208 2014-05-07] (Qihu 360 Software Co., Ltd.)

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-15] (Bigfoot Networks, Inc.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [180816 2014-04-18] (Qihu 360 Software Co., Ltd.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2012-02-23] (Broadcom Corporation.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)

R3 cthda; C:\Windows\System32\drivers\cthda.sys [1052760 2012-03-28] (Creative Technology Ltd)

R1 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [247488 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlKit; C:\Program Files (x86)\iSafe\iSafeKrnlKit.sys [78016 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlR3; C:\Program Files (x86)\iSafe\iSafeKrnlR3.sys [65216 2014-07-16] (Elex do Brasil Participações Ltda)

R1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [48640 2014-07-09] (Elex do Brasil Participações Ltda)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)

R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-05-17] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

U4 bdselfpr; 

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]

U4 vsserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-21 22:38 - 2014-07-21 22:38 - 00854390 _____ () C:\Users\Marco\Downloads\SecurityCheck.exe

2014-07-21 18:16 - 2014-07-21 18:16 - 02347384 _____ (ESET) C:\Users\Marco\Downloads\esetsmartinstaller_deu.exe

2014-07-21 16:07 - 2014-07-21 16:07 - 00002434 _____ () C:\Windows\PFRO.log

2014-07-21 16:07 - 2014-07-21 16:07 - 00000168 _____ () C:\Windows\setupact.log

2014-07-21 16:07 - 2014-07-21 16:07 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-20 22:40 - 2014-07-21 22:42 - 00000000 ____D () C:\Users\Marco\Downloads\FRST-OlderVersion

2014-07-20 22:19 - 2014-07-20 22:19 - 00002039 _____ () C:\Users\Marco\Downloads\JRT.txt

2014-07-20 22:13 - 2014-07-21 22:37 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-20 22:01 - 2014-07-20 22:01 - 01016261 _____ (Thisisu) C:\Users\Marco\Downloads\JRT.exe

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 __SHD () C:\360Rec

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-20 21:38 - 2014-07-20 21:38 - 00001664 _____ () C:\Users\Marco\Downloads\mbam1.txt

2014-07-20 21:02 - 2014-07-21 17:14 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-20 21:01 - 2014-07-20 21:01 - 00001104 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-20 21:01 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-20 21:01 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-20 21:00 - 2014-07-20 21:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Marco\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-20 17:56 - 2014-07-20 17:56 - 00042460 _____ () C:\ComboFix.txt

2014-07-20 17:36 - 2014-07-20 17:56 - 00000000 ____D () C:\ComboFix

2014-07-20 17:36 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-20 17:36 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-20 17:36 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-20 17:36 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-20 17:32 - 2014-07-20 17:56 - 00000000 ____D () C:\Qoobox

2014-07-20 17:32 - 2014-07-20 17:54 - 00000000 ____D () C:\Windows\erdnt

2014-07-20 17:30 - 2014-07-20 17:31 - 05222180 ____R (Swearware) C:\Users\Marco\Downloads\ComboFix.exe

2014-07-20 10:23 - 2014-07-20 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-07-20 10:19 - 2014-07-20 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-07-18 19:00 - 2014-07-18 19:00 - 00000031 _____ () C:\Windows\360sd.ini

2014-07-18 18:53 - 2014-07-18 18:53 - 03408288 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-18 16:02 - 2014-07-21 22:43 - 00025639 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-18 16:02 - 2014-07-21 22:42 - 00000000 ____D () C:\FRST

2014-07-18 16:00 - 2014-07-21 22:42 - 02090496 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-17 22:16 - 2014-07-21 21:43 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:13 - 2014-07-17 22:14 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-21 17:54 - 00109098 _____ () C:\Windows\WindowsUpdate.log

2014-07-17 22:02 - 2014-07-17 22:04 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:31 - 2014-07-17 21:32 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 17:49 - 2014-07-20 22:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-17 17:49 - 2014-07-18 18:59 - 00000000 ____D () C:\ProgramData\360SD

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:49 - 2014-04-23 10:32 - 00067664 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys

2014-07-17 17:49 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:48 - 2014-05-07 11:44 - 00304208 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys

2014-07-17 17:48 - 2014-04-29 08:20 - 00305744 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys

2014-07-17 17:48 - 2014-04-29 05:50 - 00041552 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys

2014-07-17 17:48 - 2014-04-21 08:38 - 00097872 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys

2014-07-17 17:48 - 2014-04-18 08:42 - 00180816 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:37 - 2014-07-17 17:44 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 14:57 - 2014-06-13 02:19 - 00609056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-07-16 14:33 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434043.dll

2014-07-16 14:33 - 2014-06-13 04:58 - 00450904 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys

2014-07-16 14:33 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-07-16 14:33 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-07-16 14:33 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-07-16 14:33 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-07-16 14:33 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:39 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:24 - 2014-07-16 21:48 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-10 15:49 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 15:49 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 15:49 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 15:49 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 15:49 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 15:49 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 15:49 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 15:49 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 15:49 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 15:49 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 15:49 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 15:49 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 15:49 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 15:49 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 15:49 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 15:49 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 15:49 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 15:49 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 15:49 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 15:49 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 15:49 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 15:49 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 15:49 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 15:49 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 15:49 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 15:49 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 15:49 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 15:49 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 15:49 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 15:49 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 15:49 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 15:49 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 15:49 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 15:49 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 15:49 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 15:49 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 15:49 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 15:49 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 15:49 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 15:49 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 15:49 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 15:49 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 15:49 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 15:48 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 15:48 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 15:48 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 15:48 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 15:48 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 15:48 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 15:48 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-06-28 22:07 - 2014-06-28 22:15 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files\iTunes

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files\iPod

2014-06-22 09:53 - 2014-07-20 10:23 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-22 09:53 - 2014-06-22 09:54 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-21 11:03 - 2014-06-27 20:47 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag
 

==================== One Month Modified Files and Folders =======
 

2014-07-21 22:43 - 2014-07-18 16:02 - 00025639 _____ () C:\Users\Marco\Downloads\FRST.txt

2014-07-21 22:42 - 2014-07-20 22:40 - 00000000 ____D () C:\Users\Marco\Downloads\FRST-OlderVersion

2014-07-21 22:42 - 2014-07-18 16:02 - 00000000 ____D () C:\FRST

2014-07-21 22:42 - 2014-07-18 16:00 - 02090496 _____ (Farbar) C:\Users\Marco\Downloads\FRST64.exe

2014-07-21 22:42 - 2012-12-01 03:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-21 22:38 - 2014-07-21 22:38 - 00854390 _____ () C:\Users\Marco\Downloads\SecurityCheck.exe

2014-07-21 22:37 - 2014-07-20 22:13 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\iSafe

2014-07-21 22:18 - 2013-01-12 16:13 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-21 21:43 - 2014-07-17 22:16 - 00000000 ____D () C:\Program Files (x86)\iSafe

2014-07-21 21:28 - 2013-01-12 16:13 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-21 18:16 - 2014-07-21 18:16 - 02347384 _____ (ESET) C:\Users\Marco\Downloads\esetsmartinstaller_deu.exe

2014-07-21 17:54 - 2014-07-17 22:04 - 00109098 _____ () C:\Windows\WindowsUpdate.log

2014-07-21 17:14 - 2014-07-20 21:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-21 16:42 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks

2014-07-21 16:42 - 2012-12-01 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks

2014-07-21 16:42 - 2012-12-01 03:26 - 00000000 ____D () C:\Program Files (x86)\AlienRespawn

2014-07-21 16:14 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-21 16:14 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-21 16:07 - 2014-07-21 16:07 - 00002434 _____ () C:\Windows\PFRO.log

2014-07-21 16:07 - 2014-07-21 16:07 - 00000168 _____ () C:\Windows\setupact.log

2014-07-21 16:07 - 2014-07-21 16:07 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-21 16:07 - 2012-11-30 19:58 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-07-21 16:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-20 22:40 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360safe

2014-07-20 22:19 - 2014-07-20 22:19 - 00002039 _____ () C:\Users\Marco\Downloads\JRT.txt

2014-07-20 22:01 - 2014-07-20 22:01 - 01016261 _____ (Thisisu) C:\Users\Marco\Downloads\JRT.exe

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 __SHD () C:\360Rec

2014-07-20 21:48 - 2014-07-20 21:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-20 21:41 - 2014-06-20 12:42 - 00000000 ____D () C:\AdwCleaner

2014-07-20 21:38 - 2014-07-20 21:38 - 00001664 _____ () C:\Users\Marco\Downloads\mbam1.txt

2014-07-20 21:01 - 2014-07-20 21:01 - 00001104 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-20 21:01 - 2014-07-20 21:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-20 21:01 - 2014-07-20 21:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Marco\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-20 19:18 - 2013-02-14 14:38 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\TS3Client

2014-07-20 18:03 - 2010-11-21 08:50 - 00699666 _____ () C:\Windows\system32\perfh007.dat

2014-07-20 18:03 - 2010-11-21 08:50 - 00149774 _____ () C:\Windows\system32\perfc007.dat

2014-07-20 18:03 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-20 17:59 - 2012-12-16 17:50 - 00000000 ____D () C:\Users\Marco\AppData\Local\Apps\2.0

2014-07-20 17:57 - 2012-12-10 17:12 - 00000000 ____D () C:\Users\Marco\AppData\Local\SoftThinks

2014-07-20 17:56 - 2014-07-20 17:56 - 00042460 _____ () C:\ComboFix.txt

2014-07-20 17:56 - 2014-07-20 17:36 - 00000000 ____D () C:\ComboFix

2014-07-20 17:56 - 2014-07-20 17:32 - 00000000 ____D () C:\Qoobox

2014-07-20 17:56 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-20 17:54 - 2014-07-20 17:32 - 00000000 ____D () C:\Windows\erdnt

2014-07-20 17:51 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-20 17:36 - 2012-12-10 17:54 - 00001912 _____ () C:\Windows\epplauncher.mif

2014-07-20 17:31 - 2014-07-20 17:30 - 05222180 ____R (Swearware) C:\Users\Marco\Downloads\ComboFix.exe

2014-07-20 10:27 - 2013-05-22 22:19 - 00003460 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask

2014-07-20 10:23 - 2014-07-20 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iTunes

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files\iPod

2014-07-20 10:23 - 2014-06-22 09:53 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-07-20 10:19 - 2014-07-20 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-07-20 10:19 - 2013-07-14 11:31 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-07-20 02:00 - 2013-01-01 12:32 - 00000000 ____D () C:\Users\Marco\AppData\Local\Adobe

2014-07-19 21:35 - 2012-12-11 18:54 - 00000000 ____D () C:\ProgramData\Origin

2014-07-19 21:06 - 2012-12-11 18:54 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-07-18 19:00 - 2014-07-18 19:00 - 00000031 _____ () C:\Windows\360sd.ini

2014-07-18 18:59 - 2014-07-17 17:49 - 00000000 ____D () C:\ProgramData\360SD

2014-07-18 18:53 - 2014-07-18 18:53 - 03408288 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-18 02:14 - 2013-01-12 16:14 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\Windows\system32\log

2014-07-17 22:16 - 2014-07-17 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2014-07-17 22:14 - 2014-07-17 22:14 - 00117384 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-17 22:14 - 2014-07-17 22:13 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk (1).exe

2014-07-17 22:04 - 2014-07-17 22:02 - 12788128 _____ (Elex do Brasil Participações Ltda) C:\Users\Marco\Downloads\yet_another_cleaner_sk.exe

2014-07-17 21:36 - 2012-12-01 03:29 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-07-17 21:32 - 2014-07-17 21:32 - 00000000 ____D () C:\Program Files\CPUID

2014-07-17 21:32 - 2014-07-17 21:31 - 01141408 _____ ( ) C:\Users\Marco\Downloads\hwmonitor_1.25-setup.exe

2014-07-17 21:15 - 2014-07-17 21:15 - 00000000 ____D () C:\Program Files\Bitdefender

2014-07-17 21:14 - 2013-06-22 15:18 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender

2014-07-17 17:49 - 2014-07-17 17:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\360SD

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 _RSHD () C:\360SANDBOX

2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security

2014-07-17 17:45 - 2014-07-17 17:45 - 00000000 ____D () C:\Program Files\360

2014-07-17 17:44 - 2014-07-17 17:37 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Marco\Downloads\360is_4.9.0.4900D.exe

2014-07-17 16:08 - 2014-07-17 16:08 - 01670872 _____ () C:\Windows\system32\bda9DF5.tmp

2014-07-16 22:37 - 2012-12-01 03:25 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display

2014-07-16 22:36 - 2014-07-16 22:36 - 00003184 _____ () C:\Windows\System32\Tasks\{D9E3D589-0D13-467D-A0FE-6A65CB013D52}

2014-07-16 22:34 - 2012-12-16 17:50 - 00000000 ____D () C:\Users\Marco\AppData\Local\Deployment

2014-07-16 21:48 - 2014-07-15 18:24 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-16 14:57 - 2012-12-01 03:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-07-16 14:57 - 2012-12-01 03:26 - 00000000 ____D () C:\Temp

2014-07-16 14:57 - 2012-11-30 19:58 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-16 14:53 - 2012-11-30 19:57 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-07-16 14:02 - 2014-07-16 14:02 - 00000000 ____D () C:\ProgramData\Riot Games

2014-07-16 14:02 - 2013-06-22 16:17 - 00000376 _____ () C:\Users\Marco\AppData\Roamingprivacy.xml

2014-07-15 18:41 - 2014-07-15 18:41 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\DropboxMaster

2014-07-15 18:41 - 2014-07-15 18:39 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox

2014-07-15 18:40 - 2014-07-15 18:40 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-15 18:24 - 2013-10-31 13:07 - 00008654 _____ () C:\Windows\system32\bddel.dat

2014-07-11 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-07-11 11:48 - 2014-05-06 21:47 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 11:48 - 2010-11-21 09:00 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 11:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-10 23:14 - 2013-08-15 17:07 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 23:13 - 2012-12-15 20:23 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 19:57 - 2013-10-05 13:34 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-07-09 17:42 - 2012-12-01 03:04 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-09 17:42 - 2012-12-01 03:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 17:42 - 2012-12-01 03:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-08 16:20 - 2013-01-27 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2014-07-07 20:30 - 2012-12-10 23:34 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype

2014-07-04 17:41 - 2012-12-01 03:31 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-07-04 13:34 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-03 20:09 - 2013-12-11 19:05 - 00000000 ____D () C:\Users\Marco\AppData\Local\Battle.net

2014-07-03 16:12 - 2013-05-26 16:43 - 00000000 ___RD () C:\Users\Marco\Desktop\Sims 3

2014-07-03 16:11 - 2014-04-10 18:47 - 00000000 ____D () C:\Users\Marco\Desktop\Dolmetscheinsatz 23.04-25.04

2014-07-03 16:09 - 2013-12-11 19:07 - 00000000 ____D () C:\Program Files (x86)\Hearthstone

2014-07-03 15:44 - 2013-06-22 20:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-06-30 20:52 - 2012-12-20 22:18 - 00000000 ____D () C:\Users\Marco\AppData\Local\Windows Live

2014-06-30 18:13 - 2013-12-11 19:05 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-06-30 04:09 - 2014-07-10 15:49 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 15:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-29 15:16 - 2014-04-20 21:42 - 00002065 _____ () C:\Users\Public\Desktop\PlayMemories Home-Hilfe.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002203 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00002179 _____ () C:\Users\Public\Desktop\PlayMemories Home.lnk

2014-06-29 15:16 - 2013-12-22 19:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home

2014-06-29 13:07 - 2012-12-10 17:44 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Adobe

2014-06-28 22:15 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Mascha's Geburtstag

2014-06-28 22:09 - 2012-12-10 17:12 - 00000000 ____D () C:\Users\Marco

2014-06-27 20:47 - 2014-06-21 11:03 - 00000000 ____D () C:\Users\Marco\Desktop\Bilder Uwe's geburtstag

2014-06-27 20:47 - 2014-05-15 17:49 - 00000000 ____D () C:\Users\Marco\Desktop\Filmprojekt

2014-06-23 21:13 - 2013-01-12 16:13 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-23 21:13 - 2013-01-12 16:13 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-22 10:29 - 2012-12-01 03:31 - 00000000 ____D () C:\ProgramData\Adobe

2014-06-22 09:54 - 2014-06-22 09:54 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-22 09:54 - 2014-06-22 09:53 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-21 10:47 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-18 06:00
 

==================== End Of Log ============================

--- --- ---

ob ich noch Probleme haben werde, wird sich herausstellen, denn ich bin gerade auf eine unbekannte $Recycle.bin-Datei in Laufwerk C gestoßen, die sich meines Wissens nach vorher nicht dort befand bzw. gar existierte.^^

Java und Adobe updaten.

Screenshot von der Datei bitte, ich wette es ist der Papierkorb ;)

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Guten Abend,
wieder einmal vielen Dank für die schnelle Antwort!
Der Screenshot ist auf meinem Profil hochgeladen :

http://www.trojaner-board.de/members/150725-albums.html

Hier nun die Fixlog.txt :

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-07-2014

Ran by Marco at 2014-07-22 18:37:41 Run:1

Running from C:\Users\Marco\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

*****************
 

'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
 

==== End of Fixlog ====

Jo, is der Papierkorb. Systemsteuerung > Ordneroptionen > versteckte Dateien ausblenden.

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo schrauber! Vielen vielen Dank für deine sofortige Hilfe !!!
Es gibt da nur ein kleines Problem....
als ich delfix.exe über FilePony laden wollte, machte sich eine Benachrichtigung über 360 Internet Security auf, die ich gerade auf meinem Profil hochgeladen habe. Außerdem kann ich die Datei deshalb auch nicht runterladen!

!Update! 23.07.14 15:40Uhr
Ich glaube es lag an der Internetseite, dass der Download-Link eventuell infiziert ist, denn als ich auf einer anderen Seite das Programm herunterladete, kam dieser Warnhinweis nicht.

Die Seite ist nicht infiziert, du hast vllt auf Werbung geklickt :)