| |
| |||||||
Log-Analyse und Auswertung: Windows 8: Unerwünschte Tabs öffnen sich selbstständigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
27.08.2013, 21:05
| #1 |
| |  Windows 8: Unerwünschte Tabs öffnen sich selbstständig Hallo! Seit einigen Wochen öffnen sich Tabs selbstständig. Meistens wenn ich im Internet surfe (ich benutze Google Chrome), manchmal aber auch wenn ich nicht im Internet bin. Meistens sind es ''komische'' Werbungen oder Warnmeldungen. Ich habe mit Norton Internet Security einen vollständigen Scan durchgeführt, bei dem nichts gefunden wurde. Vielen Dank im Voraus! Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-08-2013 03
Ran by Frän at 2013-08-27 19:59:18
Running from C:\Users\Frän\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Ashampoo AppLauncher (Medion) v.1.0.0 (x32 Version: 1.0.0)
BrowserProtect (x32)
CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3111_44883)
CyberLink PhotoDirector 3 (x32 Version: 3.0.3124)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1920)
CyberLink PowerDirector (Version: 9.0.0.3815c)
CyberLink PowerDVD 10 (x32 Version: 10.0.4125.02)
CyberLink PowerDVD Copy 1.5 (x32 Version: 1.5.2715b)
CyberLink PowerRecover (Version: 5.7.0.0913)
CyberLink PowerRecover (x32 Version: 5.7.0.0913)
CyberLink YouCam 5 (x32 Version: 5.0.1930)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Home Theater v4 (x32 Version: 7.2.8000.17)
Fotogalerie (x32 Version: 16.4.3505.0912)
Galerie de photos (x32 Version: 16.4.3505.0912)
Google Chrome (x32 Version: 29.0.1547.57)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2875)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.5.4.0423)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.6.1210.0278)
Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) WiDi (Version: 3.5.40.0)
Intel® PROSet/Wireless WiFi Software (Version: 15.05.6000.1620)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Mediathek (x32 Version: 1.4.0)
Medion Home Cinema 10 (x32 Version: 10.0)
Medion Home Cinema 10 (x32 Version: 10.1924)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SkyDrive (HKCU Version: 17.0.2003.1112)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
Norton Internet Security (x32 Version: 20.4.0.40)
NVIDIA Control Panel 307.17 (Version: 307.17)
NVIDIA Graphics Driver 307.17 (Version: 307.17)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4517.1509)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4517.1509)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4517.1509)
Open It! (x32 Version: 1.1.1)
PHotkey (x32 Version: 1.00.0081)
Photo Common (x32 Version: 16.4.3505.0912)
Photo Gallery (x32 Version: 16.4.3505.0912)
QuickLaunch (x32 Version: 1.00.0019)
Raccolta foto (x32 Version: 16.4.3505.0912)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6722)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.30136)
rosoft Office 365 Home Premium - en-us (Version: 15.0.4517.1509)
Software Version Updater (x32 Version: 1.1.3.6)
SpeedUpMyPC (x32 Version: 5.3.4.5)
Synaptics Pointing Device Driver (Version: 16.2.16.0)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2)
Uniblue DriverScanner (x32 Version: 4.0.9.10)
Update for Zip Opener (HKCU)
Video downloader 2.0.0.432 (Version: 2.0.0.432)
Windows Live (x32 Version: 16.4.3505.0912)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Yontoo 2.05 (Version: 2.05)
==================== Restore Points =========================
16-08-2013 11:59:08 Geplanter Prüfpunkt
23-08-2013 13:05:56 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {160D366C-8719-4975-89E2-B5B0F87AA03B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {1E2D4E92-39FB-41B6-BF18-498F3CA2873B} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-09-21] (Synaptics Incorporated)
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3917F0AC-397D-4C83-B0F0-EDADBD25214A} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {43ADF1A8-DF20-4362-95EA-1A8DE5968792} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2013-06-01] (Microsoft Corporation)
Task: {4AF9E389-A22B-475F-BC76-DDA9DB4B4384} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {4B0A69E2-DDEB-434D-8D72-2A27EBC3A76C} - System32\Tasks\DSite => C:\Users\FRN~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-06-15] ()
Task: {4B425098-F679-499E-90FD-A162EFC4EB21} - System32\Tasks\AmiUpdXp => C:\Users\Frän\AppData\Local\SwvUpdater\Updater.exe [2013-07-22] (Amonetize ltd.)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {57FD43BC-C806-43B8-972B-1ACED87EA7F3} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe No File
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {6842C529-741A-4FA9-A6CE-CF837C2F3357} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {686F5E52-281E-466D-8C8C-8A016F0FA121} - System32\Tasks\Microsoft\Office\Office First Run Task => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {73F4FB9A-DACD-4776-8A47-9AD5C30D174D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {87563E62-A6C1-4C42-A94A-9AC314F072CE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.)
Task: {8A96857F-2517-4899-8F47-7B3B847DC02A} - System32\Tasks\spmonitor => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe [2013-01-08] (Uniblue Systems Ltd)
Task: {8E221387-44A9-492E-9009-47889569BD04} - System32\Tasks\User_Feed_Synchronization-{2D60F361-165E-406E-A316-CF374E708143} => C:\Windows\system32\msfeedssync.exe [2012-07-26] (Microsoft Corporation)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {947B36C5-6162-4644-8CDA-7D450C96DA8B} - System32\Tasks\SpeedUpMyPC => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe [2013-01-08] (Uniblue Systems Ltd)
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {A83F0E73-40D2-4919-8E41-1DA93A0CA50C} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe No File
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B359581D-FFDA-4552-9D74-5ED9CD26F4F1} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-595690888-405288296-2019926607-500
Task: {B4BB57B0-08F0-40E2-9B68-569676C54961} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {B5F456A0-F9F4-40AC-938C-73E6715A5607} - System32\Tasks\DriverScanner => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2012-07-10] (Uniblue Systems Limited)
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C061A1D4-C437-48DA-BD62-F52B90AD8DBE} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C2DE4DF7-F793-4DDE-8D4F-6970482806FA} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CB0A8485-4D91-4362-843B-29BAB1576CD9} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {CCDF28A2-DAF6-4B0F-A2DA-C2F4476F23E9} - System32\Tasks\WPD\SqmUpload_S-1-5-21-595690888-405288296-2019926607-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D3683CA8-EAF2-462E-80C5-9F9CB8017C96} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E1ACD61B-7A51-4AE6-9372-B00DD97F58F5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.)
Task: {E3322BBD-842D-48EB-98EE-95FB2E13A12D} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {E34EA690-3489-4B7A-ABB4-AC0F2C98A1CD} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2013-08-14] (Microsoft Corporation)
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E733E308-90D5-4075-B4E9-4F18A923DE00} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {E9E10238-E549-4DF2-B81D-30AAB6F42AC5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {FABDF229-5A9B-4FF4-954C-2D9EC9A8DA89} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {FEF8CC6D-1DBB-4DB6-96A2-15E85DC1F51D} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-595690888-405288296-2019926607-1002
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Frän\AppData\Local\SwvUpdater\Updater.exe
Task: C:\Windows\Tasks\DriverScanner.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\FRN~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SpeedUpMyPC.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe
Task: C:\Windows\Tasks\spmonitor.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe
==================== Alternate Data Streams (whitelisted) ==========
AlternateDataStreams: C:\Users\Frän\Desktop\Thumbs.db:encryptable
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/27/2013 01:20:20 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (08/26/2013 10:41:11 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/26/2013 08:14:25 AM) (Source: Application Hang) (User: )
Description: Programm OneClick.exe, Version 13.0.3020.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 10a0
Startzeit: 01cea1f0dd321c9f
Endzeit: 1106
Anwendungspfad: C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe
Berichts-ID: 1634ada3-0e1f-11e3-bea9-6036dd0580ab
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (08/26/2013 00:54:58 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (08/26/2013 00:41:38 AM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/25/2013 08:05:54 AM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/24/2013 08:06:28 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (08/24/2013 07:23:17 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/22/2013 10:41:10 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/22/2013 06:28:16 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
System errors:
=============
Error: (08/26/2013 09:35:32 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 26.08.2013 um 09:18:44 unerwartet heruntergefahren.
Error: (08/25/2013 01:41:22 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 25.08.2013 um 13:39:21 unerwartet heruntergefahren.
Error: (08/25/2013 07:55:33 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 24.08.2013 um 21:50:00 unerwartet heruntergefahren.
Error: (08/23/2013 06:04:18 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 23.08.2013 um 18:02:11 unerwartet heruntergefahren.
Error: (08/21/2013 09:32:58 AM) (Source: Service Control Manager) (User: )
Description: Dienst "CyberLink PowerDVD 10 MS Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/20/2013 09:59:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet:
%%5
Error: (08/20/2013 09:59:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet:
%%5
Error: (08/20/2013 09:59:35 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet:
%%5
Error: (08/20/2013 09:59:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet:
%%5
Error: (08/20/2013 08:43:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel® Centrino® Wireless Bluetooth® + High Speed Service" wurde nicht richtig gestartet.
Microsoft Office Sessions:
=========================
Error: (08/27/2013 01:20:20 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (08/26/2013 10:41:11 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/26/2013 08:14:25 AM) (Source: Application Hang)(User: )
Description: OneClick.exe13.0.3020.210a001cea1f0dd321c9f1106C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe1634ada3-0e1f-11e3-bea9-6036dd0580ab
Error: (08/26/2013 00:54:58 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (08/26/2013 00:41:38 AM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/25/2013 08:05:54 AM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/24/2013 08:06:28 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (08/24/2013 07:23:17 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/22/2013 10:41:10 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161
Error: (08/22/2013 06:28:16 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
==================== Memory info ===========================
Percentage of memory in use: 62%
Total physical RAM: 3977.02 MB
Available physical RAM: 1483.16 MB
Total Pagefile: 11913.02 MB
Available Pagefile: 9297.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:869.8 GB) (Free:810.9 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:41.45 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 3E99AF5C)
Partition: GPT Partition Type
==================== End Of Log ============================
Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:51 on 27/08/2013 (Frän)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-08-2013 03
Ran by Frän (administrator) on 27-08-2013 19:58:13
Running from C:\Users\Frän\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Uniblue Systems Limited) C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
(Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\GPMTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Windows\syswow64\wwahost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11582848 2012-09-30] (Motorola Solutions, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-09-21] (Synaptics Incorporated)
HKCU\...\Run: [DriverScanner] - C:\Program Files (x86)\Uniblue\DriverScanner\launcher.exe [338848 2012-07-10] (Uniblue Systems Limited)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [258576 2012-07-30] (CyberLink Corp.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-12] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll [247144 2012-10-12] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://mixidj.delta-search.com/?affID=121139&babsrc=HP_ss&mntrId=40376036DD0580A8
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {62B19FDB-7E1F-4C9A-9CC5-CFDE8A03E7FD} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension64.dll ()
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension32.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll No File
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Google Search) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Video downloader) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk\2.0.0.432_0
CHR Extension: (Norton Identity Protection) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [805888 2012-11-29] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2012-10-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132480 2012-10-01] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1337216 2012-10-01] (Motorola Solutions, Inc.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-08-21] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-08-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-08-21] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130826.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130826.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\ENG64.SYS [126040 2013-08-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\ENG64.SYS [126040 2013-08-20] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\EX64.SYS [2098776 2013-08-20] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\EX64.SYS [2098776 2013-08-20] (Symantec Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-09-21] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-11-15] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-08-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-27 19:56 - 2013-08-27 19:56 - 01579024 _____ (Farbar) C:\Users\Frän\Desktop\FRST64.exe
2013-08-27 19:52 - 2013-08-27 19:52 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe
2013-08-27 19:51 - 2013-08-27 19:51 - 00000000 _____ C:\Users\Frän\defogger_reenable
2013-08-27 19:50 - 2013-08-27 19:50 - 00050477 _____ C:\Users\Frän\Desktop\Defogger.exe
2013-08-23 19:15 - 2013-08-23 19:21 - 00000000 ____D C:\Users\FRN~1\AppData\Local\NPE
2013-08-23 18:10 - 2013-08-23 18:10 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-20 22:53 - 2013-08-20 22:52 - 00866592 _____ C:\Users\Frän\Desktop\Norton_Removal_Tool.exe
2013-08-20 20:42 - 2013-08-23 18:05 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-20 20:42 - 2013-08-23 18:04 - 00002505 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-20 20:42 - 2013-08-21 08:15 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-20 20:42 - 2013-08-21 08:15 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Symantec
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-20 20:40 - 2013-08-23 18:05 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-20 20:40 - 2013-08-20 20:42 - 00000000 ____D C:\ProgramData\Norton
2013-08-20 20:40 - 2013-08-20 20:40 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-18 10:45 - 2013-08-18 10:48 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 10:11 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-18 10:11 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-18 09:57 - 2013-07-26 06:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 09:57 - 2013-07-26 06:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 09:57 - 2013-07-26 04:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 09:57 - 2013-07-26 04:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 09:57 - 2013-07-26 04:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 09:57 - 2013-07-26 04:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 09:57 - 2013-07-26 04:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 09:57 - 2013-07-26 04:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 09:57 - 2013-07-26 03:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 09:57 - 2013-07-26 01:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-18 09:56 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-18 09:56 - 2013-07-13 07:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-18 09:56 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-18 09:56 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-18 09:56 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-18 09:56 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-18 09:54 - 2013-07-09 07:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-18 09:54 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-18 09:54 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-04 16:14 - 2013-08-06 23:24 - 00000000 ____D C:\Users\Frän\Desktop\England mit Moni und Bübsi
2013-08-01 12:38 - 2013-08-20 20:39 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect
==================== One Month Modified Files and Folders =======
2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 ____D C:\FRST
2013-08-27 19:57 - 2013-04-01 10:37 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-27 19:56 - 2013-08-27 19:56 - 01579024 _____ (Farbar) C:\Users\Frän\Desktop\FRST64.exe
2013-08-27 19:56 - 2013-03-28 15:25 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2D60F361-165E-406E-A316-CF374E708143}
2013-08-27 19:52 - 2013-08-27 19:52 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe
2013-08-27 19:51 - 2013-08-27 19:51 - 00000000 _____ C:\Users\Frän\defogger_reenable
2013-08-27 19:51 - 2013-03-21 09:05 - 00000000 ____D C:\Users\Frän
2013-08-27 19:50 - 2013-08-27 19:50 - 00050477 _____ C:\Users\Frän\Desktop\Defogger.exe
2013-08-27 19:26 - 2012-11-08 01:01 - 00754172 _____ C:\Windows\system32\perfh007.dat
2013-08-27 19:26 - 2012-11-08 01:01 - 00156362 _____ C:\Windows\system32\perfc007.dat
2013-08-27 19:26 - 2012-07-26 08:28 - 01748838 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-27 19:23 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-08-27 10:39 - 2013-03-21 09:05 - 01841056 _____ C:\Windows\WindowsUpdate.log
2013-08-26 23:10 - 2013-06-15 12:11 - 00000300 _____ C:\Windows\Tasks\DSite.job
2013-08-26 21:33 - 2013-03-21 09:13 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-595690888-405288296-2019926607-1002
2013-08-26 21:05 - 2013-03-21 11:48 - 00000352 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-08-26 20:23 - 2013-03-21 09:29 - 00000000 ____D C:\Users\Frän\AppData\Roaming\DVDVideoSoft
2013-08-26 10:49 - 2013-03-21 11:52 - 00000272 _____ C:\Windows\Tasks\SpeedUpMyPC.job
2013-08-26 09:38 - 2013-03-21 09:09 - 00000000 ____D C:\Users\Frän\Documents\Youcam
2013-08-26 09:37 - 2013-05-29 16:29 - 00043008 ___SH C:\Users\Frän\Desktop\Thumbs.db
2013-08-26 09:37 - 2013-04-01 10:37 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-26 09:36 - 2013-03-21 11:53 - 00000354 _____ C:\Windows\Tasks\DriverScanner.job
2013-08-26 09:36 - 2013-03-21 11:52 - 00000350 _____ C:\Windows\Tasks\spmonitor.job
2013-08-26 09:35 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 09:10 - 2013-06-15 14:10 - 00000005 _____ C:\Users\Frän\AppData\Roaming\WBPU-TTL.DAT
2013-08-26 08:17 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-25 13:41 - 2012-11-08 00:17 - 00119614 _____ C:\Windows\PFRO.log
2013-08-25 07:55 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-08-23 19:21 - 2013-08-23 19:15 - 00000000 ____D C:\Users\FRN~1\AppData\Local\NPE
2013-08-23 19:14 - 2013-04-01 10:39 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-23 18:10 - 2013-08-23 18:10 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-23 18:05 - 2013-08-20 20:42 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-23 18:05 - 2013-08-20 20:40 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-23 18:05 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-08-23 18:04 - 2013-08-20 20:42 - 00002505 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-21 08:49 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 08:15 - 2013-08-20 20:42 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-21 08:15 - 2013-08-20 20:42 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-20 23:47 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-08-20 22:52 - 2013-08-20 22:53 - 00866592 _____ C:\Users\Frän\Desktop\Norton_Removal_Tool.exe
2013-08-20 22:25 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-08-20 22:00 - 2013-03-21 11:48 - 00000000 ____D C:\Users\Frän\AppData\Roaming\Yontoo
2013-08-20 22:00 - 2013-03-21 11:48 - 00000000 ____D C:\Program Files (x86)\Yontoo
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Symantec
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-20 20:42 - 2013-08-20 20:40 - 00000000 ____D C:\ProgramData\Norton
2013-08-20 20:40 - 2013-08-20 20:40 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-20 20:39 - 2013-08-01 12:38 - 00003432 _____ C:\Windows\System32\Tasks\BrowserProtect
2013-08-20 10:27 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-20 10:27 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-18 10:48 - 2013-08-18 10:45 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 10:45 - 2012-11-08 20:48 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-18 09:35 - 2013-06-02 17:41 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-08-06 23:24 - 2013-08-04 16:14 - 00000000 ____D C:\Users\Frän\Desktop\England mit Moni und Bübsi
2013-08-04 16:31 - 2013-06-22 14:06 - 00000000 ____D C:\Users\FRN~1\AppData\Local\Windows Live
2013-08-04 16:09 - 2012-07-26 08:21 - 00035967 _____ C:\Windows\setupact.log
2013-08-01 15:43 - 2013-03-21 09:53 - 00000000 ____D C:\ProgramData\BrowserProtect
2013-08-01 09:27 - 2013-07-27 10:10 - 00000076 _____ C:\Users\Frän\AppData\Roaming\WB.CFG
Files to move or delete:
====================
C:\Users\FRN~1\AppData\Local\Temp\AskSLib.dll
C:\Users\FRN~1\AppData\Local\Temp\MixiDJToolbar_yh.exe
C:\Users\FRN~1\AppData\Local\Temp\OfficeSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\SCC.dll
C:\Users\FRN~1\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\FRN~1\AppData\Local\Temp\uninst1.exe
C:\Users\FRN~1\AppData\Local\Temp\Updater.exe
C:\Users\FRN~1\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\FRN~1\AppData\Local\Temp\updD8B\BabScheduler2000201.exe
C:\Users\FRN~1\AppData\Local\Temp\UpdateWizard_104727\SilentUpdater.exe
C:\Users\FRN~1\AppData\Local\Temp\nskF6B.tmp\System.dll
C:\Users\FRN~1\AppData\Local\Temp\nskF6B.tmp\UAC.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\InstallOptions.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\System.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\UAC.dll
C:\Users\FRN~1\AppData\Local\Temp\is357113909\nss_handler.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\QtraxInstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\SymCCIS.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\bin.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\config.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\DomaIQ.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\DomaIQ10.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\OfferBrokerage_14003.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\routes.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\setup__120.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Delta Babylon.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\free-youtube-to-mp3-converter.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\IminentSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Mixi Dj Yahoo.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\setup__1474.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\speedupmypc.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Yontoo.exe
C:\Users\FRN~1\AppData\Local\Temp\busCE29\BUSolution.dll
C:\Users\FRN~1\AppData\Local\Temp\bus390E\ff21v.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BabMaint.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BExternal.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BUSolution.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BUSUninstall.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\ccp.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\ChromeToolbarSetup.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\CrxInstaller.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\GUninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\IEHelper.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\MyBabylonTB.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\sqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\setup.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\AccessibleMarshal.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\breakpadinjector.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\crashreporter.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\D3DCompiler_43.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\d3dx9_43.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\firefox.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\freebl3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\gkmedias.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\libEGL.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\libGLESv2.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\maintenanceservice.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\maintenanceservice_installer.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozalloc.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozglue.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozjs.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozsqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\msvcp100.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\msvcr100.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nspr4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nss3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssckbi.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssdbm3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssutil3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plc4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plds4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plugin-container.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\smime3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\softokn3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\ssl3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\updater.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\webapp-uninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\webapprt-stub.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\xpcom.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\xul.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\uninstall\helper.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\components\browsercomps.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\ccp.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\ChromeToolbarSetup.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\CrxInstaller.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\GUninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\IEHelper.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\MyBabylonTB.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\sqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\113DEC24-BAB0-7891-B4CC-7ACDF6BE5673\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\113DEC24-BAB0-7891-B4CC-7ACDF6BE5673\sqlite3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-20 09:23
==================== End Of Log ============================
--- --- --- Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-27 20:32:33
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000003c ST1000LM024_HN-M101MBB rev.2AR10001 931,51GB
Running: c3oynz5e.exe; Driver: C:\Users\FRN~1\AppData\Local\Temp\pwloypog.sys
---- Kernel code sections - GMER 2.1 ----
.text C:\Windows\System32\win32k.sys!W32pServiceTable fffff960000fed00 7 bytes [40, 6C, 82, 01, 00, 55, F2]
.text C:\Windows\System32\win32k.sys!W32pServiceTable + 8 fffff960000fed08 7 bytes [01, B1, C1, FF, 00, A1, DC]
---- User code sections - GMER 2.1 ----
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\nvvsvc.exe[1096] C:\Windows\system32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\nvvsvc.exe[1096] C:\Windows\system32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\nvvsvc.exe[1096] C:\Windows\system32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\WLANExt.exe[1416] C:\Windows\system32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\WLANExt.exe[1416] C:\Windows\system32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\WLANExt.exe[1416] C:\Windows\system32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1952] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1952] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1952] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1952] C:\Windows\SYSTEM32\WSOCK32.dll!recvfrom + 742 000007f955061b32 4 bytes [06, 55, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1952] C:\Windows\SYSTEM32\WSOCK32.dll!recvfrom + 750 000007f955061b3a 4 bytes [06, 55, F9, 07]
.text C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[2084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[2084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[2084] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[2308] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[2308] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[2308] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[4316] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[4316] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[4316] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4676] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4676] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[4676] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[4720] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[4720] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[4720] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Windows\System32\rundll32.exe[4748] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Windows\System32\rundll32.exe[4748] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Windows\System32\rundll32.exe[4748] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\wbem\wmiprvse.exe[4488] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f959781532 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\wbem\wmiprvse.exe[4488] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f95978153a 4 bytes [78, 59, F9, 07]
.text C:\Windows\system32\wbem\wmiprvse.exe[4488] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f95978165a 4 bytes [78, 59, F9, 07]
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\csrss.exe [724:748] fffff960008f65e8
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:1244] 00000000011a1c24
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3088] 0000000072c3e54e
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3660] 0000000070aaeec8
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3664] 0000000070aaeec8
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3668] 0000000070aaeec8
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3792] 000000007314319b
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:3108] 000000005b3d16dc
Thread C:\Windows\SYSTEM32\ntdll.dll [1232:6324] 0000000066be86f9
Thread C:\Program Files (x86)\PHotkey\PHotkey.exe [5592:3068] 0000000000780060
Thread C:\Program Files (x86)\PHotkey\MsgTranAgt.exe [5588:5600] 0000000000250060
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Geändert von Franzile (27.08.2013 um 21:42 Uhr) |
|
27.08.2013, 22:19
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Windows 8: Unerwünschte Tabs öffnen sich selbstständig Adware/Junkware/Toolbars entfernen
__________________1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
28.08.2013, 20:18
| #3 |
| | Windows 8: Unerwünschte Tabs öffnen sich selbstständig adw cleaner:
__________________Code:
ATTFilter # AdwCleaner v3.001 - Report created 28/08/2013 at 19:36:49
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Frän - FRÄN-PC
# Running from : C:\Users\Frän\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Uniblue\DriverScanner
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\DriverScanner
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\SpeedUpMyPC
Folder Deleted : C:\Program Files (x86)\openit
Folder Deleted : C:\Program Files (x86)\Uniblue\DriverScanner
Folder Deleted : C:\Program Files (x86)\Uniblue\SpeedUpMyPC
Folder Deleted : C:\Program Files (x86)\Yontoo
Folder Deleted : C:\Users\FRN~1\AppData\Local\Temp\Iminent
Folder Deleted : C:\Users\Frän\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Frän\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Frän\AppData\Roaming\DSite
Folder Deleted : C:\Users\Frän\AppData\Roaming\file scout
Folder Deleted : C:\Users\Frän\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Frän\AppData\Roaming\Uniblue\DriverScanner
Folder Deleted : C:\Users\Frän\AppData\Roaming\Uniblue\SpeedUpMyPC
Folder Deleted : C:\Users\Frän\AppData\Roaming\Yontoo
File Deleted : C:\Users\Public\Desktop\DriverScanner.lnk
File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Users\Public\Desktop\SpeedUpMyPC.lnk
File Deleted : C:\Users\Frän\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\Frän\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Windows\Tasks\AmiUpdXp.job
File Deleted : C:\Windows\System32\Tasks\AmiUpdXp
File Deleted : C:\Windows\System32\Tasks\BrowserProtect
File Deleted : C:\Windows\Tasks\driverscanner.job
File Deleted : C:\Windows\System32\Tasks\driverscanner
File Deleted : C:\Windows\Tasks\DSite.job
File Deleted : C:\Windows\System32\Tasks\DSite
File Deleted : C:\Windows\Tasks\SpeedUpMyPC.job
File Deleted : C:\Windows\System32\Tasks\SpeedUpMyPC
File Deleted : C:\Windows\Tasks\spmonitor.job
File Deleted : C:\Windows\System32\Tasks\spmonitor
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKCU\Software\5f6dddeb43cba42
Key Deleted : HKLM\SOFTWARE\5f6dddeb43cba42
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{77BEC163-D389-42C1-91A4-C758846296A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{77BEC163-D389-42C1-91A4-C758846296A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\mixidj
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\Uniblue\DriverScanner
Key Deleted : HKLM\Software\Uniblue\SpeedUpMyPC
Key Deleted : HKLM\Software\Video downloader
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : [x64] HKLM\SOFTWARE\Video downloader
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16660
-\\ Google Chrome v29.0.1547.57
[ File : C:\Users\Frän\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [9275 octets] - [28/08/2013 19:35:54]
AdwCleaner[S0].txt - [8845 octets] - [28/08/2013 19:36:49]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8905 octets] ##########
JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.4 (08.22.2013:1)
OS: Windows 8 x64
Ran by Fr„n on 28.08.2013 at 19:48:45,03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\driverscanner
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\uniblue
~~~ Files
Successfully deleted: [File] "C:\Users\Fr„n\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"
Successfully deleted: [File] "C:\Users\Fr„n\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\speedupmypc.lnk"
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.08.2013 at 19:53:01,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Frän (administrator) on 28-08-2013 20:03:47
Running from C:\Users\Frän\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\GPMTray.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11582848 2012-09-30] (Motorola Solutions, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-09-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [258576 2012-07-30] (CyberLink Corp.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-12] (NVIDIA Corporation)
AppInit_DLLs-x32: [0 ] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKCU - {62B19FDB-7E1F-4C9A-9CC5-CFDE8A03E7FD} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Google Search) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Norton Identity Protection) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\FRN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [805888 2012-11-29] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2012-10-19] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-15] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132480 2012-10-01] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1337216 2012-10-01] (Motorola Solutions, Inc.)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\ENG64.SYS [126040 2013-08-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\ENG64.SYS [126040 2013-08-20] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\EX64.SYS [2098776 2013-08-20] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130827.002\EX64.SYS [2098776 2013-08-20] (Symantec Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-09-21] (Synaptics Incorporated)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-11-15] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-08-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-28 19:35 - 2013-08-28 19:36 - 00000000 ____D C:\AdwCleaner
2013-08-28 19:30 - 2013-08-28 19:30 - 01579080 _____ (Farbar) C:\Users\Frän\Desktop\FRST64.exe
2013-08-28 19:29 - 2013-08-28 19:29 - 01021434 _____ (Thisisu) C:\Users\Frän\Desktop\JRT.exe
2013-08-28 19:28 - 2013-08-28 19:28 - 00994642 _____ C:\Users\Frän\Desktop\adwcleaner.exe
2013-08-28 19:27 - 2013-08-28 20:03 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe 2
2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 ____D C:\FRST
2013-08-27 19:52 - 2013-08-28 19:27 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe
2013-08-27 19:51 - 2013-08-27 19:51 - 00000000 _____ C:\Users\Frän\defogger_reenable
2013-08-23 19:15 - 2013-08-23 19:21 - 00000000 ____D C:\Users\FRN~1\AppData\Local\NPE
2013-08-23 18:10 - 2013-08-23 18:10 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-20 22:53 - 2013-08-20 22:52 - 00866592 _____ C:\Users\Frän\Desktop\Norton_Removal_Tool.exe
2013-08-20 20:42 - 2013-08-23 18:05 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-20 20:42 - 2013-08-23 18:04 - 00002505 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-20 20:42 - 2013-08-21 08:15 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-20 20:42 - 2013-08-21 08:15 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Symantec
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-20 20:40 - 2013-08-23 18:05 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-20 20:40 - 2013-08-20 20:42 - 00000000 ____D C:\ProgramData\Norton
2013-08-20 20:40 - 2013-08-20 20:40 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-18 10:45 - 2013-08-18 10:48 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 10:11 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-18 10:11 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-18 09:57 - 2013-07-26 06:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-18 09:57 - 2013-07-26 06:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 09:57 - 2013-07-26 06:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 09:57 - 2013-07-26 06:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 09:57 - 2013-07-26 04:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 09:57 - 2013-07-26 04:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 09:57 - 2013-07-26 04:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 09:57 - 2013-07-26 04:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 09:57 - 2013-07-26 04:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 09:57 - 2013-07-26 04:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 09:57 - 2013-07-26 04:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 09:57 - 2013-07-26 03:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 09:57 - 2013-07-26 01:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-18 09:56 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-18 09:56 - 2013-07-13 07:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-18 09:56 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-18 09:56 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-18 09:56 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-18 09:56 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-18 09:56 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-18 09:54 - 2013-07-09 07:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-18 09:54 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-18 09:54 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-04 16:14 - 2013-08-06 23:24 - 00000000 ____D C:\Users\Frän\Desktop\England mit Moni und Bübsi
==================== One Month Modified Files and Folders =======
2013-08-28 20:03 - 2013-08-28 19:27 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe 2
2013-08-28 20:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-08-28 19:57 - 2013-04-01 10:37 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 19:48 - 2013-08-28 19:48 - 00000000 ____D C:\Windows\ERUNT
2013-08-28 19:46 - 2013-03-28 15:25 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2D60F361-165E-406E-A316-CF374E708143}
2013-08-28 19:41 - 2013-04-01 10:37 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 19:41 - 2013-03-21 09:09 - 00000000 ____D C:\Users\Frän\Documents\Youcam
2013-08-28 19:40 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 19:40 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-08-28 19:39 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-08-28 19:36 - 2013-08-28 19:35 - 00000000 ____D C:\AdwCleaner
2013-08-28 19:36 - 2013-03-25 10:24 - 00000000 ____D C:\ProgramData\Uniblue
2013-08-28 19:36 - 2013-03-21 11:52 - 00000000 ____D C:\Users\Frän\AppData\Roaming\Uniblue
2013-08-28 19:36 - 2013-03-21 11:52 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-28 19:30 - 2013-08-28 19:30 - 01579080 _____ (Farbar) C:\Users\Frän\Desktop\FRST64.exe
2013-08-28 19:29 - 2013-08-28 19:29 - 01021434 _____ (Thisisu) C:\Users\Frän\Desktop\JRT.exe
2013-08-28 19:28 - 2013-08-28 19:28 - 00994642 _____ C:\Users\Frän\Desktop\adwcleaner.exe
2013-08-28 19:27 - 2013-08-27 19:52 - 00000000 ____D C:\Users\Frän\Desktop\Trojanerhilfe
2013-08-28 16:32 - 2012-11-08 01:01 - 00754172 _____ C:\Windows\system32\perfh007.dat
2013-08-28 16:32 - 2012-11-08 01:01 - 00156362 _____ C:\Windows\system32\perfc007.dat
2013-08-28 16:32 - 2012-07-26 08:28 - 01748838 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-28 10:56 - 2013-03-21 09:05 - 01945229 _____ C:\Windows\WindowsUpdate.log
2013-08-28 08:51 - 2013-06-15 14:10 - 00000005 _____ C:\Users\Frän\AppData\Roaming\WBPU-TTL.DAT
2013-08-28 08:14 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 ____D C:\FRST
2013-08-27 19:51 - 2013-08-27 19:51 - 00000000 _____ C:\Users\Frän\defogger_reenable
2013-08-27 19:51 - 2013-03-21 09:05 - 00000000 ____D C:\Users\Frän
2013-08-26 21:33 - 2013-03-21 09:13 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-595690888-405288296-2019926607-1002
2013-08-26 20:23 - 2013-03-21 09:29 - 00000000 ____D C:\Users\Frän\AppData\Roaming\DVDVideoSoft
2013-08-26 09:37 - 2013-05-29 16:29 - 00043008 ___SH C:\Users\Frän\Desktop\Thumbs.db
2013-08-25 13:41 - 2012-11-08 00:17 - 00119614 _____ C:\Windows\PFRO.log
2013-08-25 07:55 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-08-23 19:21 - 2013-08-23 19:15 - 00000000 ____D C:\Users\FRN~1\AppData\Local\NPE
2013-08-23 19:14 - 2013-04-01 10:39 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-23 18:10 - 2013-08-23 18:10 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-23 18:05 - 2013-08-20 20:42 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-23 18:05 - 2013-08-20 20:40 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-23 18:04 - 2013-08-20 20:42 - 00002505 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2013-08-21 08:49 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 08:15 - 2013-08-20 20:42 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-21 08:15 - 2013-08-20 20:42 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-20 23:47 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-08-20 22:52 - 2013-08-20 22:53 - 00866592 _____ C:\Users\Frän\Desktop\Norton_Removal_Tool.exe
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Symantec
2013-08-20 20:42 - 2013-08-20 20:42 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-20 20:42 - 2013-08-20 20:40 - 00000000 ____D C:\ProgramData\Norton
2013-08-20 20:40 - 2013-08-20 20:40 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-20 10:27 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-20 10:27 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-18 10:48 - 2013-08-18 10:45 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 10:45 - 2012-11-08 20:48 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-18 09:35 - 2013-06-02 17:41 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-08-06 23:24 - 2013-08-04 16:14 - 00000000 ____D C:\Users\Frän\Desktop\England mit Moni und Bübsi
2013-08-04 16:31 - 2013-06-22 14:06 - 00000000 ____D C:\Users\FRN~1\AppData\Local\Windows Live
2013-08-04 16:09 - 2012-07-26 08:21 - 00035967 _____ C:\Windows\setupact.log
2013-08-01 09:27 - 2013-07-27 10:10 - 00000076 _____ C:\Users\Frän\AppData\Roaming\WB.CFG
Files to move or delete:
====================
C:\Users\FRN~1\AppData\Local\Temp\AskSLib.dll
C:\Users\FRN~1\AppData\Local\Temp\MixiDJToolbar_yh.exe
C:\Users\FRN~1\AppData\Local\Temp\OfficeSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\Quarantine.exe
C:\Users\FRN~1\AppData\Local\Temp\SCC.dll
C:\Users\FRN~1\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\FRN~1\AppData\Local\Temp\uninst1.exe
C:\Users\FRN~1\AppData\Local\Temp\Updater.exe
C:\Users\FRN~1\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\FRN~1\AppData\Local\Temp\updD8B\BabScheduler2000201.exe
C:\Users\FRN~1\AppData\Local\Temp\UpdateWizard_104727\SilentUpdater.exe
C:\Users\FRN~1\AppData\Local\Temp\nskF6B.tmp\System.dll
C:\Users\FRN~1\AppData\Local\Temp\nskF6B.tmp\UAC.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\InstallOptions.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\System.dll
C:\Users\FRN~1\AppData\Local\Temp\nsfE024.tmp\UAC.dll
C:\Users\FRN~1\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\FRN~1\AppData\Local\Temp\is357113909\nss_handler.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\QtraxInstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\is357113909\SymCCIS.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\bin.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\config.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\DomaIQ.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\DomaIQ10.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\OfferBrokerage_14003.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\routes.dll
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\setup__120.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Delta Babylon.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\free-youtube-to-mp3-converter.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\IminentSetup.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Mixi Dj Yahoo.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\setup__1474.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\speedupmypc.exe
C:\Users\FRN~1\AppData\Local\Temp\DIQ\free-youtube-to-mp3-converter_046\software\Yontoo.exe
C:\Users\FRN~1\AppData\Local\Temp\busCE29\BUSolution.dll
C:\Users\FRN~1\AppData\Local\Temp\bus390E\ff21v.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BabMaint.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BExternal.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BUSolution.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\BUSUninstall.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\ccp.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\ChromeToolbarSetup.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\CrxInstaller.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\GUninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\IEHelper.dll
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\MyBabylonTB.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\A83240F4-BAB0-7891-B5A0-B3FCB1E6F234\Latest\sqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\setup.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\AccessibleMarshal.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\breakpadinjector.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\crashreporter.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\D3DCompiler_43.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\d3dx9_43.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\firefox.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\freebl3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\gkmedias.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\libEGL.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\libGLESv2.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\maintenanceservice.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\maintenanceservice_installer.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozalloc.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozglue.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozjs.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\mozsqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\msvcp100.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\msvcr100.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nspr4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nss3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssckbi.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssdbm3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\nssutil3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plc4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plds4.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\plugin-container.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\smime3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\softokn3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\ssl3.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\updater.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\webapp-uninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\webapprt-stub.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\xpcom.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\xul.dll
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\uninstall\helper.exe
C:\Users\FRN~1\AppData\Local\Temp\7zSC6E7.tmp\core\components\browsercomps.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\ccp.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\ChromeToolbarSetup.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\CrxInstaller.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\GUninstaller.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\IEHelper.dll
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\MyBabylonTB.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\3603B489-BAB0-7891-A405-2462FF278B05\sqlite3.dll
C:\Users\FRN~1\AppData\Local\Temp\113DEC24-BAB0-7891-B4CC-7ACDF6BE5673\Setup.exe
C:\Users\FRN~1\AppData\Local\Temp\113DEC24-BAB0-7891-B4CC-7ACDF6BE5673\sqlite3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-20 09:23
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Leider wurde keine Addition.txt gespeichert. Es war hierfür aber auch kein Haken in der Checkbox. Nachdem ich Norton wieder aktiviert habe, wurde FRST als nicht sicher eingestuft und dann selbstständig entfernt. Ich hoffe, ich habe alles richtig gemacht!!! |
|
28.08.2013, 23:39
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 8: Unerwünschte Tabs öffnen sich selbstständig Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu Windows 8: Unerwünschte Tabs öffnen sich selbstständig |
| adblock, administrator, amonetize, cpu, defender, device driver, diagnostics, downloader, driverscanner, error, explorer, failed, farbar, farbar recovery scan tool, google, helper, home, internet, ntdll.dll, office 2013, office 365, plug-in, programm, registry, rundll, scan, security, server, services.exe, software, srtasks.exe, svchost.exe, symantec, system, tabs öffnen, usb, win32k.sys, windows, winlogon.exe |
Linear-Darstellung
