| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
03.09.2013, 11:28
| #1 |
| |  AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Wie schon von einigen anderen gemeldet, habe ich auch das Problem, dass Home Tab bei mir unbemerkt installiert wurde und sich nicht einfach wieder löschen lässt. Es wäre toll, wenn Ihr mir helfen würdet. Vielen Dank Renate47 |
|
03.09.2013, 11:38
| #2 |
| /// the machine /// TB-Ausbilder    | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
03.09.2013, 13:49
| #3 |
| | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Hi Schrauber,
__________________hier schon mal das FRST Logfile, das andere kommt gleich. Gruß Renate FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 01
Ran by Renate (administrator) on RENATESPC on 03-09-2013 14:34:01
Running from C:\Users\Renate\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Atheros Commnucations) C:\Windows\system32\AdminService.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\ViStart.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Windows\system32\igfxpers.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\Plugins\MetroProvider.exe
(Lee Chantrey) C:\Program Files (x86)\ViStart\Plugins\SearchProvider.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Dominik Reichl) C:\Users\Renate\Downloads\KeePass-1.26\KeePass-1-26.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM\...\Run: [EPSON Stylus DX4200] - C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIAEE.EXE /F "C:\Windows\TEMP\E_SC1C4.tmp" /EF "HKLM" [x]
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272640 2012-09-12] (Microsoft Corporation)
HKCU\...\Run: [ViStart] - C:\Program Files (x86)\ViStart\ViStart.exe [1269760 2013-01-29] (Lee-Soft.com)
HKCU\...\Run: [ViUpdater] - C:\Program Files (x86)\ViUpdater\ViUpdater.exe [122880 2013-01-11] (Lee-Soft.com)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1511792 2013-03-28] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [38112 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2012-11-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-02] (F-Secure Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Device Detector] - DevDetect.exe -autorun [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [F-Secure Hoster (666)] - C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll,C:\Windows\SysWOW64\nvinit.dll [247144 2012-10-08] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Renate\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.5&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKCU - DefaultScope {EFC72FFC-6E60-4086-9B91-5DEEE605E090} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.2&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.5&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
SearchScopes: HKCU - {EFC72FFC-6E60-4086-9B91-5DEEE605E090} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&q={searchTerms}
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\bh\zonealarm.dll (Check Point Software Technologies LTD)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Users\Renate\AppData\Roaming\HomeTab\HomeTab.dll (Simply Tech Ltd.)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - HomeTab - {ba696155-d96e-4281-b467-0367a0456474} - C:\Users\Renate\AppData\Roaming\HomeTab\HomeTab.dll (Simply Tech Ltd.)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default
FF NewTab: about:home
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: about:home
FF Keyword.URL: hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HomeTab - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
FF Extension: WOT - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: about:newtab?source=home
CHR RestoreOnStartup: "about:newtab?source=home"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (FoxyDeal) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan\6.2.0_0
CHR Extension: (Google Docs) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (WOT) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.13_0
CHR Extension: (YouTube) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (HomeTab) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgibjgmnimooanbagcfpnkmngejcojaf\4.6_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [fgibjgmnimooanbagcfpnkmngejcojaf] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx
==================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2012-08-29] (Atheros Commnucations)
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-02] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-25] (F-Secure Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MySQLServer; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14249 2013-03-22] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S4 SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2864448 2013-08-01] (Iminent)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-07-24] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-08-21] ()
R0 fsbts; C:\Windows\SysWow64\Drivers\fsbts.sys [42248 2013-03-18] ()
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [284008 2012-10-08] (NVIDIA Corporation)
S3 AthBTPort; \SystemRoot\system32\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP; \SystemRoot\system32\drivers\btath_a2dp.sys [x]
S3 btath_avdt; \SystemRoot\system32\drivers\btath_avdt.sys [x]
S3 BTATH_BUS; \SystemRoot\System32\drivers\btath_bus.sys [x]
S3 BTATH_HCRP; \SystemRoot\System32\drivers\btath_hcrp.sys [x]
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP; \SystemRoot\System32\drivers\btath_rcp.sys [x]
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-03 14:32 - 2013-09-03 14:32 - 01950474 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 09:49 - 2013-08-16 09:52 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:38 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 09:38 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 09:38 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 09:38 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 02:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-16 09:37 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 09:36 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 09:29 - 2013-08-16 09:29 - 01207640 _____ (Lee-Soft.com) C:\Users\Renate\Downloads\windows-start-menu-vistart_8.1.0.exe
2013-08-16 09:23 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-16 09:23 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-16 09:20 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-16 09:20 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-16 09:20 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 18:56 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-15 18:56 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:04 - 2013-08-13 12:12 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:02 - 2013-08-13 12:12 - 00000000 ____D C:\ProgramData\AAV
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-08-11 18:26 - 2013-08-11 18:26 - 00392048 _____ (Softonic ) C:\Users\Renate\Downloads\SoftonicDownloader_fuer_deepnet-explorer.exe
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
2013-08-06 09:31 - 2013-08-21 17:27 - 00007920 _____ C:\Windows\PFRO.log
2013-08-05 18:51 - 2013-08-26 11:45 - 00000000 ____D C:\Users\Renate\AppData\Local\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\ProgramData\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\Program Files (x86)\WinZip
2013-08-05 18:49 - 2013-08-05 18:50 - 51187712 _____ C:\Users\Renate\Downloads\wz175-32gev.msi
2013-08-05 12:16 - 2013-08-21 17:21 - 07684479 _____ C:\Windows\FSISU.log
2013-08-05 12:16 - 2013-08-21 17:21 - 01779944 _____ C:\Windows\FSSFM.log
2013-08-05 12:16 - 2013-08-21 17:21 - 01540018 _____ C:\Windows\FSSETUP.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00294760 _____ C:\Windows\FSDEPH.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00272420 _____ C:\Windows\FSPROD.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00229964 _____ C:\Windows\RunSetup.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00142032 _____ C:\Windows\FSAVINST.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00012390 _____ C:\Windows\FSAVCSIN.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00008044 _____ C:\Windows\FSGKIAIN.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00003650 _____ C:\Windows\FSLDIN.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00003415 _____ C:\Windows\fsavunin.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00002380 _____ C:\Windows\DAASINST.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00001314 _____ C:\Windows\fsav_db_setup.log
2013-08-05 12:16 - 2013-08-21 17:20 - 00038536 _____ C:\Windows\fspplugin.log
2013-08-05 12:15 - 2013-08-05 12:15 - 00001945 _____ C:\Users\Public\Desktop\F-Secure.lnk
2013-08-04 18:12 - 2013-08-04 18:12 - 00301549 _____ C:\Users\Renate\Downloads\biroto_RT00000179_1f.gpx
2013-08-04 17:54 - 2013-08-04 17:54 - 00555010 _____ C:\Users\Renate\Downloads\biroto_RT00000043_1f.gpx
2013-08-04 17:30 - 2013-08-04 17:30 - 01613242 _____ C:\Users\Renate\Downloads\biroto_RT00000413_1f.gpx
==================== One Month Modified Files and Folders =======
2013-09-03 14:33 - 2013-09-03 14:33 - 00000000 ____D C:\FRST
2013-09-03 14:32 - 2013-09-03 14:32 - 01950474 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-03 14:21 - 2012-11-29 21:10 - 01890791 _____ C:\Windows\WindowsUpdate.log
2013-09-03 14:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-09-03 12:32 - 2012-11-29 21:21 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4140535175-895356475-445613732-1002
2013-09-03 12:26 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:39 - 2013-07-24 11:29 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-03 11:36 - 2012-11-30 10:14 - 00000500 _____ C:\Users\Renate\AppData\Roaming\sp_data.sys
2013-09-03 11:36 - 2012-09-07 11:28 - 00000868 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-09-03 11:34 - 2013-02-05 20:50 - 00000646 _____ C:\Windows\Tasks\Scheduled scanning task.job
2013-09-03 11:34 - 2012-09-07 11:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-03 11:34 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-03 11:33 - 2012-07-26 07:26 - 01048576 ___SH C:\Windows\system32\config\BBI
2013-09-03 11:30 - 2013-07-24 11:29 - 00000000 ____D C:\Users\Renate\AppData\Roaming\HomeTab
2013-09-03 11:30 - 2013-07-24 11:29 - 00000000 ____D C:\Program Files (x86)\HomeTab
2013-09-03 11:29 - 2013-01-13 17:32 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-09-03 11:21 - 2012-12-02 17:35 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E165C355-7056-450E-828D-23AFC16DD271}
2013-09-03 11:20 - 2013-02-05 20:50 - 00003418 _____ C:\Windows\System32\Tasks\Scheduled scanning task
2013-09-03 11:18 - 2012-12-02 14:01 - 00000000 ____D C:\Users\Renate\AppData\Local\Windows Live
2013-09-02 18:00 - 2012-08-03 01:02 - 00753596 _____ C:\Windows\system32\perfh007.dat
2013-09-02 18:00 - 2012-08-03 01:02 - 00155998 _____ C:\Windows\system32\perfc007.dat
2013-09-02 18:00 - 2012-07-26 09:28 - 01746930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-02 17:27 - 2012-09-07 11:28 - 00000870 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-02 12:01 - 2012-12-02 14:40 - 00000000 ____D C:\Users\Renate\AppData\Local\CrashDumps
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 18:57 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViStart
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:54 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-26 11:45 - 2013-08-05 18:51 - 00000000 ____D C:\Users\Renate\AppData\Local\WinZip
2013-08-26 09:44 - 2012-11-30 10:25 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-08-22 12:51 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-08-21 17:30 - 2013-01-02 19:01 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys
2013-08-21 17:27 - 2013-08-06 09:31 - 00007920 _____ C:\Windows\PFRO.log
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:21 - 2013-08-05 12:16 - 07684479 _____ C:\Windows\FSISU.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01779944 _____ C:\Windows\FSSFM.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01540018 _____ C:\Windows\FSSETUP.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00294760 _____ C:\Windows\FSDEPH.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00272420 _____ C:\Windows\FSPROD.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00229964 _____ C:\Windows\RunSetup.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00142032 _____ C:\Windows\FSAVINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00012390 _____ C:\Windows\FSAVCSIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00008044 _____ C:\Windows\FSGKIAIN.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00003650 _____ C:\Windows\FSLDIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00003415 _____ C:\Windows\fsavunin.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00002380 _____ C:\Windows\DAASINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00001314 _____ C:\Windows\fsav_db_setup.log
2013-08-21 17:21 - 2013-01-02 18:55 - 00019829 _____ C:\Windows\prodsett_copy.ini
2013-08-21 17:20 - 2013-08-05 12:16 - 00038536 _____ C:\Windows\fspplugin.log
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-16 09:52 - 2013-08-16 09:49 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:49 - 2012-12-12 22:34 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Users\Renate\AppData\Roaming\ViStart
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViUpdater
2013-08-16 09:29 - 2013-08-16 09:29 - 01207640 _____ (Lee-Soft.com) C:\Users\Renate\Downloads\windows-start-menu-vistart_8.1.0.exe
2013-08-15 18:06 - 2013-04-18 15:50 - 00116224 ___SH C:\Users\Renate\Desktop\Thumbs.db
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-15 18:04 - 2012-11-29 21:10 - 00000000 ____D C:\Users\Renate
2013-08-13 12:32 - 2013-04-04 18:46 - 00000000 ____D C:\Users\Renate\AppData\Roaming\elsterformular
2013-08-13 12:31 - 2013-04-04 18:45 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:12 - 2013-08-13 12:04 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:12 - 2013-08-13 12:02 - 00000000 ____D C:\ProgramData\AAV
2013-08-13 08:38 - 2013-07-24 11:29 - 00032328 _____ C:\Windows\Launcher.exe
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-11 18:26 - 2013-08-11 18:26 - 00392048 _____ (Softonic ) C:\Users\Renate\Downloads\SoftonicDownloader_fuer_deepnet-explorer.exe
2013-08-07 19:31 - 2012-09-07 11:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
2013-08-06 09:31 - 2013-01-02 14:00 - 00000000 ____D C:\Program Files (x86)\F-Secure
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\ProgramData\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\Program Files (x86)\WinZip
2013-08-05 18:50 - 2013-08-05 18:49 - 51187712 _____ C:\Users\Renate\Downloads\wz175-32gev.msi
2013-08-05 12:15 - 2013-08-05 12:15 - 00001945 _____ C:\Users\Public\Desktop\F-Secure.lnk
2013-08-04 18:12 - 2013-08-04 18:12 - 00301549 _____ C:\Users\Renate\Downloads\biroto_RT00000179_1f.gpx
2013-08-04 17:54 - 2013-08-04 17:54 - 00555010 _____ C:\Users\Renate\Downloads\biroto_RT00000043_1f.gpx
2013-08-04 17:30 - 2013-08-04 17:30 - 01613242 _____ C:\Users\Renate\Downloads\biroto_RT00000413_1f.gpx
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\Users\Renate\AppData\Local\Temp\A~NSISu_.exe
C:\Users\Renate\AppData\Local\Temp\tbuE1F9.exe
C:\Users\Renate\AppData\Local\Temp\nsf2BA.tmp\ShellLink.dll
C:\Users\UpdatusUser\AppData\Local\Temp\nsgE511.tmp\System.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-30 10:24
==================== End Of Log ============================
--- --- --- --- --- --- |
|
03.09.2013, 13:54
| #4 |
| | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Hi Schrauber, jetzt auch noch Addition.txt. Grüße Renate47FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2013 01
Ran by Renate at 2013-09-03 14:35:39
Running from C:\Users\Renate\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20 (x32)
AAVUpdateManager (x32 Version: 18.00.0000)
ACDSee 8 (x32 Version: 8.0.41)
Adobe Reader X (10.1.6) MUI (x32 Version: 10.1.6)
Alcor Micro USB Card Reader (x32 Version: 3.8.142.61628)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ASUS Instant Key (x32 Version: 1.0.5)
ASUS InstantOn (x32 Version: 3.0.1)
ASUS LifeFrame3 (x32 Version: 3.1.4)
ASUS Live Update (x32 Version: 3.1.7)
ASUS N Series Demo (x32 Version: 1.0.0002)
ASUS Power4Gear Hybrid (Version: 2.0.3)
ASUS Smart Gesture (x32 Version: 1.0.35)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.03.0004)
ASUS Tutor (x32 Version: 1.0.7)
ASUS USB Charger Plus (x32 Version: 2.1.4)
ASUS Video Magic (x32 Version: 6.0.4712)
ASUS WebStorage Sync Agent (x32 Version: 1.1.9.120)
ASUSDVD (x32 Version: 10.0.4126.52)
AsusVibe2.0 (x32 Version: 2.0.10.168)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.1.0.4)
ATK Package (x32 Version: 1.0.0022)
Bonjour (Version: 3.0.0.10)
CCleaner (Version: 4.02)
Computer Security 12.83.101.0 (release) (x32 Version: 12.83.101.0)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3019_44673)
CyberLink PowerDirector (x32 Version: 8.0.4905d)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
dows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0)
Dropbox (HKCU Version: 1.6.18)
ElsterFormular (x32 Version: 14.3.20130522)
EPSON Scan (x32)
EPSON-Drucker-Software
FinanzmanagerV8 (x32 Version: 10.2.5.33)
Fotogalerie (x32 Version: 16.4.3505.0912)
FoxyDeal (x32 Version: 1.1.0)
Free System Utilities (x32 Version: 1.1.0.95)
Free SystemUtilities (x32 Version: 1.1.0.95)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)
F-Secure (x32 Version: 1.83.311.0)
F-Secure CCF Reputation (x32 Version: 1.0.25.1877)
F-Secure CCF Scanning 1.23.124.8831 (release) (x32 Version: 1.23.124.8831)
F-Secure Network CCF 1.02.128 (x32 Version: 1.02.128)
Garmin BaseCamp (x32 Version: 4.2.2)
Garmin MapSource (x32 Version: 6.16.3)
Garmin Training Center (x32 Version: 3.6.5)
Garmin USB Drivers (x32 Version: 2.3.1.0)
GIMP 2.8.2 (Version: 2.8.2)
Goldgräber (x32)
Google Earth (x32 Version: 7.1.1.1580)
HomeTab 4.7 (x32 Version: 4.7)
Horland's Scan2Pdf (check your license!) (x32 Version: 2.9.0.0)
Iminent (x32 Version: 6.27.21.0)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36354)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2817)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (x32 Version: 7.0.250)
Junk Mail filter update (x32 Version: 16.4.3505.0912)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MyFreeCodec (HKCU)
MySQL Connector C++ 1.1.2 (Version: 1.1.2)
MySQL Connector J (x32 Version: 5.1.23)
MySQL Connector Net 6.6.5 (x32 Version: 6.6.5)
MySQL Connector/ODBC 5.2(w) (Version: 5.2.4)
MySQL Documents 5.6 (x32 Version: 5.6.10)
MySQL Examples and Samples 5.6 (x32 Version: 5.6.10)
MySQL For Excel 1.1.0 (x32 Version: 1.1.0)
MySQL Installer (x32 Version: 1.1.7.0)
MySQL Notifier 1.0.3 (x32 Version: 1.0.3)
MySQL Server 5.6 (Version: 5.6.10)
MySQL Workbench 5.2 CE (x32 Version: 5.2.47)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA HD Audio Driver 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA PhysX (x32 Version: 9.12.0613)
NVIDIA PhysX System Software 9.12.0613 (Version: 9.12.0613)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Online Safety 2.83.1329.952 (x32 Version: 2.83.1329.952)
PDF-Viewer (Version: 2.5.208.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6690)
Samsung Kies (x32 Version: 2.5.1.12123_2)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.22.0)
Secunia PSI (3.0.0.6001) (x32 Version: 3.0.0.6001)
Shared C Run-time for x64 (Version: 10.0.0)
Shredder Classic 4 ct 2012 (x32)
Steuer-Software 2013 (x32 Version: 18.09)
TeamViewer 8 (x32 Version: 8.0.16642)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
ViStart (x32 Version: 8.0.0.4040)
ViUpdater (x32 Version: 1.0.0.3)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Mail (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Live Writer (x32 Version: 16.4.3505.0912)
Windows Live Writer Resources (x32 Version: 16.4.3505.0912)
Windows Utils (x32)
Windows-Treiberpaket - ASUS (ATP) Mouse (10/29/2012 1.0.0.148) (Version: 10/29/2012 1.0.0.148)
WinFlash (x32 Version: 2.41.1)
WinZip 17.5 (x32 Version: 17.5.10480)
WOT for Internet Explorer (Version: 12.8.2.0)
ZoneAlarm Security Toolbar on IE and Chrome (x32 Version: 1.8.11.11)
==================== Restore Points =========================
13-08-2013 10:04:12 Steuer-Software 2013 wurde installiert.
22-08-2013 11:10:01 Geplanter Prüfpunkt
30-08-2013 08:55:54 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00F0938E-5168-4E1F-AB52-1BE4EF38536A} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-04] (ASUS)
Task: {01045AE6-5A9C-4BF5-8E37-D7A6E2A374C3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1A9A2047-0D26-44FD-BFF6-0225D37690E3} - System32\Tasks\User_Feed_Synchronization-{E165C355-7056-450E-828D-23AFC16DD271} => C:\Windows\system32\msfeedssync.exe [2012-07-26] (Microsoft Corporation)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\System32\sysmain.dll [2013-05-04] (Microsoft Corporation)
Task: {1D3E2891-9004-44CC-BCE3-8E5261BEA682} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc
Task: {1D932523-3BEA-431F-B198-55A0CC892B61} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe [2013-05-29] ()
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\WSClient.dll [2012-09-20] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {31D12AB8-4AA0-4FE9-B767-B2DB8C7ACBA9} - System32\Tasks\WPD\SqmUpload_S-1-5-21-4140535175-895356475-445613732-1002 => C:\Windows\System32\portabledeviceapi.dll [2012-07-26] (Microsoft Corporation)
Task: {348775E7-AEB7-46B0-BEC7-7A79CF80D315} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-10-31] (AsusTek)
Task: {35E4F70F-F453-4395-9C5A-B4FB9CA96E33} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {381C7835-695B-419F-B44F-51D4A38BC384} - System32\Tasks\Browser Updater\Browser Updater => C:\Program Files (x86)\HomeTab\TBUpdater.dll [2013-08-22] (Simply Tech Ltd.)
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2013-06-01] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {5CAD6717-6E33-4EE8-815C-118459C802ED} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4140535175-895356475-445613732-1002
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {654E5E08-8F28-4AA8-BF92-AB23271755F2} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {6727B976-CB08-4E28-B6C5-4A9DBE5D9D61} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => start wuauserv
Task: {6A8D9048-EE5D-41C5-8146-0C6C22A266F2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6F9AD438-EED3-4583-988E-26AEB6D9BD7B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7A738CF0-D949-44CD-BF44-75EB0C2BA305} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {7A9FC288-1253-4EBF-ADC3-87B76B373481} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.)
Task: {7BCE6B53-84AB-4558-B312-20A615AA05F0} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {8F70C0B4-AF7C-44D9-AD42-23ADDB22C66F} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2012-06-22] (ASUS)
Task: {8F8161C9-AD2D-4E06-8382-5F8765DCBEE9} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\HomeTab\ProtectedSearch.exe [2013-08-13] (Simplygen)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\WSClient.dll [2012-09-20] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {A8E23EC6-C5D0-456C-9C04-380AB438F6D6} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-05-29] ()
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\System32\Windows.Storage.ApplicationData.dll [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E585610E-8A57-45FB-AF44-04A95B5B8ECC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EA589CDB-3EDF-4B09-95B1-8106631CEEF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {EAD237E7-D276-4257-9F16-51DF41548733} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\System32\Startupscan.dll [2012-07-26] (Microsoft Corporation)
Task: {EC491277-FF11-45C5-B665-DCD7A232CAF7} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F5D55228-D79E-49F8-892B-847131BA4822} - System32\Tasks\Scheduled scanning task => C:\PROGRA~2\F-Secure\apps\COMPUT~1\ANTI-V~1\fsav.exe [2013-08-02] (F-Secure Corporation)
Task: {F79939EF-9163-4C7E-9A9F-67C2F3D5683E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {FA5FD92A-5005-4D04-8188-7697F41657B7} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-06-20] (ASUSTeK Computer Inc.)
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\Scheduled scanning task.job => C:\PROGRA~2\F-Secure\apps\COMPUT~1\ANTI-V~1\fsav.exe
==================== Loaded Modules (whitelisted) =============
2012-11-29 21:49 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\combase.dll
2012-07-26 01:55 - 2012-07-26 05:07 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\WINMMBASE.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\system32\SHCORE.dll
2012-07-26 01:31 - 2012-07-26 05:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\profext.dll
2012-08-04 11:34 - 2012-08-04 11:34 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2012-08-04 11:34 - 2012-08-04 11:34 - 00044160 _____ (ASUS) C:\Program Files\ASUS\P4G\OvrClk.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\SHCORE.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 02731880 _____ (NVIDIA Corporation) C:\Windows\SYSTEM32\nvapi64.dll
2013-08-21 17:23 - 2013-06-25 12:37 - 00506304 _____ (F-Secure Corporation) c:\program files (x86)\f-secure\apps\computersecurity\hips\fshook64.dll
2012-11-29 22:13 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Immersive.dll
2012-11-29 21:47 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\Windows\System32\twinapi.dll
2013-06-16 14:20 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\Bcp47Langs.dll
2013-06-16 14:21 - 2013-05-04 08:58 - 10116096 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2012-07-26 01:33 - 2012-07-26 05:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
2013-05-21 13:39 - 2013-04-09 06:51 - 00456704 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll
2012-07-26 04:06 - 2012-07-26 05:07 - 00119296 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\sppc.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 00973672 _____ (NVIDIA Corporation) C:\Windows\SYSTEM32\nvumdshimx.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 00247144 _____ (NVIDIA Corporation) C:\Windows\SYSTEM32\nvinitx.dll
2012-07-25 22:22 - 2012-08-05 18:40 - 08505856 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2012-07-26 02:05 - 2012-07-26 05:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\dcomp.dll
2012-07-26 01:54 - 2012-07-26 05:05 - 00171008 _____ (Microsoft Corporation) C:\Windows\System32\IDStore.dll
2012-07-26 01:31 - 2012-07-26 05:08 - 00343552 _____ (Microsoft Corporation) C:\Windows\System32\wlidprov.dll
2012-07-26 03:51 - 2012-07-26 05:05 - 00063488 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\elscore.dll
2012-07-26 01:24 - 2012-07-26 05:05 - 00186368 _____ (Microsoft Corporation) C:\Windows\System32\InputSwitch.dll
2012-07-26 04:22 - 2012-07-26 05:05 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\ElsLad.dll
2012-07-26 01:55 - 2012-07-26 05:07 - 01161216 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\UIAutomationCore.dll
2012-11-29 21:49 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\Windows\System32\WinTypes.dll
2012-07-26 02:04 - 2012-07-26 05:07 - 00046592 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\windows.globalization.fontgroups.dll
2013-04-18 17:08 - 2013-03-02 04:44 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2012-07-26 02:26 - 2012-07-26 05:07 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2012-07-26 03:22 - 2012-07-26 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\IME\SHARED\IMEROAMING.DLL
2012-11-29 21:48 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2013-03-13 18:39 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.Connectivity.dll
2012-07-26 02:05 - 2012-07-26 05:07 - 00029184 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\wcmapi.dll
2012-07-26 02:06 - 2012-07-26 05:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\TimeBrokerClient.dll
2012-11-29 21:48 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\Windows\System32\wpnprv.dll
2012-07-26 03:37 - 2012-07-26 05:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\NcaApi.dll
2012-07-26 01:33 - 2012-07-26 05:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll
2012-07-26 02:10 - 2012-07-26 05:05 - 00013824 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\DPAPI.dll
2012-07-26 01:54 - 2012-07-26 05:05 - 00101888 _____ (Microsoft Corporation) C:\Windows\System32\BluetoothApis.dll
2012-07-26 01:58 - 2012-07-26 05:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.Sockets.PushEnabledApplication.dll
2012-07-26 02:06 - 2012-07-26 05:07 - 00015360 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\SystemEventsBrokerClient.dll
2012-07-26 02:08 - 2012-07-26 05:06 - 00205312 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\NTASN1.dll
2013-01-09 18:08 - 2012-11-26 06:20 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2012-03-13 11:23 - 2012-03-13 11:23 - 01500672 _____ (ASUS Cloud Corporation.) C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 00162552 _____ (Dropbox, Inc.) C:\Users\Renate\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\apprepapi.dll
2013-02-18 10:44 - 2012-11-02 07:18 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\keepaliveprovider.dll
2012-07-26 02:12 - 2012-07-26 06:55 - 01326784 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\webservices.dll
2012-07-26 04:19 - 2012-07-26 05:06 - 00023040 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\pcacli.dll
2012-08-09 04:49 - 2012-08-05 18:41 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-07-26 01:55 - 2012-07-26 05:07 - 00180224 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\WINMMBASE.dll
2012-07-26 01:22 - 2012-07-26 05:06 - 00601600 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll
2013-03-13 18:39 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\Windows\system32\wlroamextension.dll
2013-08-05 12:16 - 2013-08-02 16:23 - 00234432 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\fspmapi_64.dll
2013-07-10 18:19 - 2013-04-23 00:08 - 09808440 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
2012-07-25 22:13 - 2012-07-12 04:01 - 00856016 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MSVCR110_CLR0400.dll
2013-07-13 18:06 - 2013-07-13 18:06 - 22589440 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ab0a8fc3d086a3aaf942f366a12a9185\mscorlib.ni.dll
2012-08-28 03:09 - 2012-08-28 03:09 - 00057728 _____ (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSContextMenu.dll
2009-03-02 04:07 - 2009-03-02 04:07 - 00200704 _____ ( ) C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\LogicNP.EZShellExtensions.dll
2013-06-20 17:35 - 2013-04-02 00:06 - 01237024 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
2013-08-18 13:06 - 2013-08-18 13:06 - 13227520 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\System\84008211017a9909ffd971633716ffc5\System.ni.dll
2013-08-18 13:06 - 2013-08-18 13:07 - 10137600 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\a51eab8159bbe5f0cd2713f383468750\System.Core.ni.dll
2013-08-18 13:07 - 2013-08-18 13:07 - 02442752 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\44d13058912d32041546a00e66598e2b\Microsoft.VisualBasic.ni.dll
2012-08-28 03:09 - 2012-08-28 03:09 - 00323456 _____ (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\eCaremeDLL.dll
2010-03-18 11:31 - 2010-03-18 11:31 - 00270336 _____ (The Apache Software Foundation) C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\log4net.dll
2013-08-18 13:09 - 2013-08-18 13:09 - 01259008 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\196905ff422a58f4cb735f4156b1ecaa\System.Configuration.ni.dll
2013-08-18 13:12 - 2013-08-18 13:12 - 10137088 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\17fa9b078e78b857f6c5f5a8081220ae\System.Xml.ni.dll
2013-08-18 13:09 - 2013-08-18 13:09 - 02268672 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\810a79f22ac4d44804984e417c380706\System.Drawing.ni.dll
2013-05-01 17:50 - 2013-05-01 17:50 - 00012656 ____R (WinZip Computing, S.L.) C:\Program Files (x86)\WinZip\wzshls64.dll
2012-09-07 11:33 - 2012-10-02 21:50 - 00055144 _____ (NVIDIA Corporation) C:\Windows\SYSTEM32\Nv3DAppShExtR.dll
2013-04-18 17:09 - 2013-03-02 04:45 - 00951808 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Globalization.dll
2012-07-26 02:35 - 2012-07-26 05:07 - 04243456 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2012-07-26 04:33 - 2012-07-26 04:33 - 00629760 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\UIRibbonRes.dll
2012-07-26 02:51 - 2012-07-26 05:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\NetworkItemFactory.dll
2012-07-26 03:46 - 2012-07-26 05:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dtsh.dll
2012-07-26 02:59 - 2012-07-26 05:05 - 00465408 _____ (Microsoft Corporation) C:\Windows\System32\dlnashext.dll
2012-11-29 21:49 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Media.Streaming.dll
2013-04-18 17:08 - 2013-03-02 04:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\System32\DevDispItemProvider.dll
2012-07-26 01:56 - 2012-07-26 05:05 - 00138752 _____ (Microsoft Corporation) C:\Windows\System32\FunDisc.dll
2012-07-26 02:00 - 2012-07-26 05:05 - 00074240 _____ (Microsoft Corporation) C:\Windows\System32\fdproxy.dll
2012-12-18 11:13 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\fdwcn.dll
2012-12-18 11:13 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\Windows\System32\wcnapi.dll
2012-07-26 03:18 - 2012-07-26 05:05 - 00027648 _____ (Microsoft Corporation) C:\Windows\System32\fdWNet.dll
2012-07-26 02:06 - 2012-07-26 05:05 - 00059904 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\dfscli.dll
2012-11-29 22:47 - 2012-11-29 22:47 - 00849360 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.VCLibs.110.00_11.0.51106.1_x64__8wekyb3d8bbwe\MSVCR110.dll
2012-12-21 11:11 - 2012-12-21 11:12 - 00054176 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\wllog.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 03429792 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Service.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\shcore.dll
2012-07-26 01:33 - 2012-07-26 05:07 - 00175616 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Storage.ApplicationData.dll
2012-11-29 21:47 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\twinapi.dll
2012-12-21 11:11 - 2012-12-21 11:12 - 00229792 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\shared\bici.dll
2012-07-26 01:59 - 2012-07-26 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\threadpoolwinrt.dll
2013-06-16 14:20 - 2013-05-04 08:57 - 00122368 _____ (Microsoft Corporation) C:\Windows\System32\biwinrt.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 01938328 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.dll
2013-05-21 13:39 - 2013-04-09 06:51 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll
2012-07-26 04:01 - 2012-07-26 05:07 - 00056320 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.dll
2012-07-26 01:41 - 2012-07-26 05:07 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 00054688 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Shared.Market.dll
2013-02-05 20:17 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\System32\wpnapps.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 01415584 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Eas.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 01367968 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Calendar.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 00657824 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\ModernChat\App\Components\ConversationSystem\Dll\microsoft.windowslive.chat.chatsystem.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 00644000 _____ (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.PresenceIM.dll
2012-07-26 02:06 - 2012-07-26 05:05 - 00148480 _____ (Microsoft Corporation) C:\Windows\System32\CryptoWinRT.dll
2013-04-18 17:09 - 2013-03-02 04:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
2012-07-26 01:43 - 2012-07-26 05:07 - 00371200 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.dll
2012-07-26 01:45 - 2012-07-26 05:06 - 00300032 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\NInput.dll
2012-07-26 02:06 - 2012-07-26 05:06 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\mskeyprotect.dll
2012-07-26 01:57 - 2012-07-26 05:07 - 00093184 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\VAULTCLI.dll
2012-12-21 11:11 - 2012-12-21 11:11 - 00175008 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-09-07 11:33 - 2012-10-02 21:50 - 04127592 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvUI.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\SHCORE.DLL
2012-09-07 11:34 - 2012-07-31 18:02 - 00778088 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL
2012-09-07 11:34 - 2012-07-31 18:02 - 03455848 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll
2012-09-07 11:34 - 2012-07-31 18:02 - 00980840 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NVUPDTR.DLL
2012-08-09 04:49 - 2012-08-05 18:40 - 00110592 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL
2012-08-09 04:49 - 2012-08-05 18:41 - 00062976 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\System32\SHCORE.dll
2012-08-09 04:49 - 2012-08-05 18:41 - 09007616 _____ (Intel Corporation) C:\Windows\System32\igfxress.dll
2012-09-07 11:38 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\SYSTEM32\CONEQMSAPOGUILibrary.dll
2012-09-07 11:38 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2012-09-07 11:38 - 2012-07-16 08:16 - 03643024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2012-09-07 11:38 - 2012-04-03 12:42 - 01015640 _____ (Waves Audio Ltd.) C:\Windows\SYSTEM32\MaxxAudioAPOShell64.dll
2012-07-26 02:10 - 2012-07-26 05:05 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\DPAPI.dll
2013-06-16 14:20 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\System32\Bcp47Langs.dll
2012-07-26 02:28 - 2012-07-26 05:05 - 00096256 _____ (Microsoft Corporation) C:\Windows\System32\AuthBroker.dll
2012-11-29 21:49 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.dll
2012-08-09 04:49 - 2012-08-05 18:40 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.DLL
2012-08-09 04:49 - 2012-08-05 18:40 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2012-10-31 13:09 - 2012-10-31 13:09 - 00103808 _____ (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.dll
2012-07-26 01:55 - 2012-07-26 05:07 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\uiautomationcore.dll
2012-10-31 13:10 - 2012-10-31 13:09 - 00240000 _____ (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll
2012-10-31 13:09 - 2012-10-31 13:09 - 00018304 _____ (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPStrike.dll
2010-02-28 03:24 - 2010-02-28 03:24 - 00056192 _____ (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
2012-07-26 03:37 - 2012-07-26 05:05 - 00531456 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\IEUI.dll
2012-07-26 01:57 - 2012-07-26 05:07 - 00093184 _____ (Microsoft Corporation) C:\Windows\System32\vaultcli.dll
2012-07-26 01:28 - 2012-07-26 05:05 - 00762368 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2012-11-29 21:47 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\TWINAPI.dll
2012-09-07 11:32 - 2012-07-31 18:02 - 00004096 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 00317952 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\CoProcManager\nvd3d9wrapx.dll
2012-07-26 01:55 - 2012-07-26 05:07 - 01161216 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\UIAutomationCore.DLL
2012-07-26 01:32 - 2012-07-26 05:06 - 00049664 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\PrintIsolationProxy.dll
2013-02-21 20:01 - 2005-08-08 06:00 - 00993792 _____ (SEIKO EPSON CORP.) C:\Windows\system32\spool\DRIVERS\x64\3\E_IUICAEE.DLL
2013-02-21 20:01 - 2005-08-24 06:00 - 00118784 _____ (SEIKO EPSON Corporation) C:\Windows\system32\spool\DRIVERS\x64\3\E_IMAIAEE.DLL
2012-11-29 21:49 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2012-11-29 22:13 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\system32\shcore.dll
2012-07-24 19:21 - 2012-07-24 19:21 - 04422992 _____ (Microsoft Corporation) C:\Program Files (x86)\ASUS\USBChargerPlus\mfc100u.dll
2012-07-24 19:21 - 2012-07-24 19:21 - 00016032 _____ (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\V0407.dll
2013-08-21 17:23 - 2013-06-25 12:37 - 00419264 _____ (F-Secure Corporation) c:\program files (x86)\f-secure\apps\computersecurity\hips\fshook32.dll
2012-05-08 16:51 - 2012-05-08 16:51 - 00662144 _____ (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\PureThemeRes.dll
2012-05-07 11:02 - 2012-05-07 11:02 - 00065664 _____ (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\MetroInfo.dll
2012-08-24 18:17 - 2012-08-24 18:17 - 00032768 _____ (ASUSTek) C:\Program Files (x86)\ASUS\Splendid\OVS.dll
2012-08-24 18:17 - 2012-08-24 18:17 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2012-08-24 18:17 - 2012-08-24 18:17 - 00055296 _____ (ASUSTeK) C:\Program Files (x86)\ASUS\Splendid\Chameleon.dll
2012-08-24 18:17 - 2012-08-24 18:17 - 01595392 _____ (TODO: <Company name>) C:\Program Files (x86)\ASUS\Splendid\Alb_ASUSLib.dll
2012-07-26 03:21 - 2012-07-26 05:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\wshom.ocx
2012-07-26 03:23 - 2012-07-26 05:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\ScrRun.dll
2012-07-26 03:11 - 2012-07-26 05:19 - 01210880 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2012-07-26 02:10 - 2012-07-26 05:05 - 00013824 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\DPAPI.DLL
2012-11-14 01:32 - 2012-11-14 01:32 - 00129272 _____ (Dropbox, Inc.) C:\Users\Renate\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
2013-07-10 18:19 - 2013-04-23 00:08 - 06881848 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
2013-07-13 16:36 - 2013-07-13 16:36 - 16547328 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\5e3a9f3d64adfb3c69b49d37368bf454\mscorlib.ni.dll
2013-08-18 13:12 - 2013-08-18 13:12 - 09937408 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System\375a937eec7d6faa53ac11ab2973eb76\System.ni.dll
2013-08-18 13:13 - 2013-08-18 13:13 - 03910144 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\8ff5be01c9600b28d3e41db3dbafc840\WindowsBase.ni.dll
2013-08-18 13:13 - 2013-08-18 13:13 - 10926592 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\5b504b7cd800dcd6c06d841d94ca099a\PresentationCore.ni.dll
2013-08-18 13:13 - 2013-08-18 13:13 - 18545152 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\972bf4ffab06e561447d12baf3b3dfa9\PresentationFramework.ni.dll
2013-08-18 13:15 - 2013-08-18 13:15 - 01880576 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\123cf617d7b6b31c44e39f8594f064c5\System.Xaml.ni.dll
2013-08-18 13:14 - 2013-08-18 13:14 - 01631744 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3603744988436295da5d16e76038e484\System.Drawing.ni.dll
2013-08-18 13:15 - 2013-08-18 13:15 - 12698624 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3143512c68ba24d18b7444b13fae2abb\System.Windows.Forms.ni.dll
2013-06-20 17:35 - 2013-04-02 00:06 - 01688632 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
2012-07-25 22:14 - 2012-07-12 04:02 - 00787952 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
2013-06-20 17:35 - 2013-04-02 00:06 - 00451608 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
2012-06-27 14:22 - 2012-06-27 14:22 - 00223232 _____ (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll
2012-09-07 11:32 - 2012-07-31 18:02 - 00004096 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 00286056 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvd3d9wrap.dll
2012-09-07 11:32 - 2012-10-08 12:42 - 00221032 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvdxgiwrap.dll
2013-08-18 13:15 - 2013-08-18 13:15 - 07566336 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\624ad6159b6e241ad6d28bf4dca9f14b\System.Xml.ni.dll
2013-08-18 13:13 - 2013-08-18 13:13 - 00964096 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\19ecec839509af76b1bc0ccbabd60acd\System.Configuration.ni.dll
2013-08-18 13:13 - 2013-08-18 13:13 - 00467456 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\cb65dcc8c60f33d257283ef1416a2175\PresentationFramework.Aero2.ni.dll
2012-07-25 22:13 - 2012-07-12 04:02 - 00107968 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsecimpl.dll
2012-07-26 04:07 - 2012-07-26 05:06 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00175040 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSPMAPI.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00236480 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\fslapi.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00148928 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\fsma32.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00105408 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\fsmres.eng
2013-01-02 18:55 - 2013-08-02 16:23 - 02149312 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\fsmuiav.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00605120 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\gres.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00220096 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\guilaunc.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 01960896 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\flyer.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00056256 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\fsavures.eng
2012-08-06 15:53 - 2013-06-25 12:37 - 00117696 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\json_c.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00154560 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\flyerres.eng
2013-01-02 18:55 - 2013-08-02 16:23 - 00224192 _____ (F-Secure Corp.) c:\program files (x86)\f-secure\apps\computersecurity\scanner-interface\fsgkiapi.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00068544 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\CCFIPC.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00101312 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\CCFDLLHosterAPI.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 01047488 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\ControlLayer.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00041408 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\JsonParser.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00064448 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\CuifTypes.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00129984 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\DataLayer.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00150464 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\DeclarationHandler.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 14270008 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtWebKit4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 00376376 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtXml4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 08793656 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtGui4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 02661944 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCore4.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00031168 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\ParserFramework.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 01093176 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtNetwork4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 00593464 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 00831032 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtOpenGL4.dll
2013-01-18 12:06 - 2013-06-16 14:07 - 00125888 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fs_ccf_id_converter32.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00891840 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\CuifWidgets.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00076736 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\CommonSettingsWidgets.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00306112 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\servicewidgets.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00146368 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\ActionCenterWidgets.dll
2013-04-02 09:37 - 2013-04-02 09:37 - 00285632 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\OnlineSafety\gui\widgets\OnlineSafetyWidgets.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00142272 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\HelpWidgets.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 00462392 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtHelp4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 00650808 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtSql4.dll
2013-01-02 14:00 - 2013-01-02 14:00 - 01154616 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCLucene4.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00285632 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\widgets\LaunchPadWidgets.dll
2012-11-26 14:49 - 2012-11-26 14:49 - 00034360 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files (x86)\F-Secure\imageformats\qgif4.dll
2012-11-26 14:49 - 2012-11-26 14:49 - 00036408 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files (x86)\F-Secure\imageformats\qico4.dll
2012-11-26 14:49 - 2012-11-26 14:49 - 00220728 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files (x86)\F-Secure\imageformats\qjpeg4.dll
2012-11-26 14:49 - 2012-11-26 14:49 - 00245304 _____ (Nokia Corporation and/or its subsidiary(-ies)) C:\Program Files (x86)\F-Secure\imageformats\qmng4.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00056256 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\Navigator.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00046528 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\About.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00408512 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\serviceinstallerui.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00129984 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\CuifApi.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00027072 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\ProductInfo.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00068544 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\AboutPlugin.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00179136 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\ActionCenterPlugin.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00134080 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fs_ccf_settings32.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00068544 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\Status.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00056256 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\fs_gaming_mode_ui.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00059840 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fs_gaming_mode_32.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00029120 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\SystemInfo.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00134080 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\checkforupdatesui.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00080832 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fsaua_api_dll.dll
2013-03-18 10:27 - 2013-08-02 16:23 - 00037824 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\Licensing.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00051648 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\CCF_Licensing.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00019904 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\LocaleInfo.dll
2013-04-02 09:37 - 2013-04-02 09:37 - 00781248 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\OnlineSafety\gui\plugins\OnlineSafety.dll
2013-04-02 09:37 - 2013-04-02 09:37 - 00052672 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\OnlineSafety\fsosstat.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00080832 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\HelpPlugin.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00121792 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\LaunchPadPlugin.dll
2013-01-18 12:06 - 2013-01-18 12:06 - 00155632 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\SELocalInfoAPI.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00056256 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\CuifSimpleAction.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 00117696 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\NotificationsHistoryPlugin.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00093120 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\LegacyLink.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00036288 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\fs_cs_status_notification.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00224192 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\Localization.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00028608 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\Help.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00187328 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\CommonSettingsPlugin.dll
2013-04-02 09:37 - 2013-04-02 09:37 - 00121792 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\OnlineSafety\gui\plugins\ControlPanelTools.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00059328 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\WinFirewall.dll
2013-01-02 18:55 - 2013-08-02 16:23 - 00134080 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\ManagementAgent.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00148928 _____ (F-Secure Corporation) c:\program files (x86)\f-secure\apps\computersecurity\common\fsma32.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00175040 _____ (F-Secure Corporation) c:\program files (x86)\f-secure\apps\computersecurity\common\fspmapi.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00363456 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\addproductplugin.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00064448 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fs_ccf_download_32.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00089024 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AntiVirus.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00056256 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AUASettings.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00637888 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\agent.dll
2013-08-21 17:21 - 2013-08-02 16:23 - 00056256 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\data\ManagementAgent\Email.dll
2013-05-15 16:06 - 2013-05-15 16:06 - 01440704 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\fs_secl_32.dll
2013-05-15 16:05 - 2013-05-15 16:05 - 00183232 _____ (F-Secure Corporation) C:\Program Files (x86)\F-Secure\plugins\FlyerPlugin.dll
2013-08-18 13:12 - 2013-08-18 13:13 - 06998016 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\acf905c62ab9c1b77ca69e8b745e3fdb\System.Core.ni.dll
2012-07-26 03:23 - 2012-07-26 05:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\scrrun.dll
2012-10-31 13:09 - 2012-10-31 13:09 - 00097664 _____ (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.dll
2012-07-26 01:55 - 2012-07-26 05:07 - 01161216 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\uiautomationcore.dll
2012-11-29 21:47 - 2012-09-20 07:53 - 02360320 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcGenral.DLL
2012-08-02 19:15 - 2012-08-02 19:15 - 01542720 _____ () C:\Program Files (x86)\WOT\WOT.dll
2013-07-24 11:29 - 2013-09-02 09:39 - 01071464 _____ (Simply Tech Ltd.) C:\Users\Renate\AppData\Roaming\HomeTab\HomeTab.dll
2012-07-26 01:45 - 2012-07-26 05:06 - 00300032 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\ninput.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\jscript9.dll
2012-07-26 01:28 - 2012-07-26 05:05 - 00762368 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\ieapfltr.dll
2012-10-31 13:10 - 2012-10-31 13:10 - 00025088 _____ (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\MinUser.dll
2011-06-11 02:15 - 2011-06-11 02:15 - 00608080 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MSVCP100.dll
2012-07-26 01:47 - 2012-07-26 05:05 - 00051200 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\ImgUtil.dll
2012-07-26 02:18 - 2012-07-26 05:06 - 00197120 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MSRATING.dll
2012-11-29 21:49 - 2012-09-20 08:30 - 02219008 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\D3D10Warp.dll
2012-11-29 21:49 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MsSpellCheckingFacility.dll
2013-05-16 21:42 - 2013-04-13 07:56 - 00444416 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcSpecfc.DLL
2012-10-20 21:51 - 2012-10-20 21:51 - 19399744 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\wwlib.dll
2011-02-12 00:13 - 2011-02-12 00:13 - 01748328 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\gfx.dll
2011-07-20 16:50 - 2011-07-20 16:50 - 20524392 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\oart.dll
2012-10-20 21:59 - 2012-10-20 21:59 - 18628704 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\office14\mso.dll
2011-03-17 01:11 - 2011-03-17 01:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2011-01-08 12:48 - 2011-01-08 12:48 - 00991576 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\1031\wwintl.dll
2011-07-21 08:55 - 2011-07-21 08:55 - 03204992 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\office14\1031\MSOINTL.DLL
2011-06-30 11:41 - 2011-06-30 11:41 - 72522112 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\office14\MSORES.DLL
2011-10-04 12:32 - 2011-10-04 12:32 - 00765312 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
2010-12-28 01:49 - 2010-12-28 01:49 - 01366888 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\office14\riched20.dll
2010-01-09 22:37 - 2010-01-09 22:37 - 00127232 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL
2013-01-08 07:25 - 2013-01-08 07:25 - 00640216 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\USP10.DLL
2010-12-21 03:29 - 2010-12-21 03:29 - 00218976 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\msproof7.dll
2010-01-09 22:21 - 2010-01-09 22:21 - 00078208 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL
2011-09-13 05:50 - 2011-09-13 05:50 - 00592616 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\PROOF\MSLID.DLL
2011-09-13 07:42 - 2011-09-13 07:42 - 01444584 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\1031\MSGR3GE.DLL
2012-07-26 03:28 - 2012-07-26 05:05 - 00096256 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\HLINK.DLL
2011-01-07 17:35 - 2011-01-07 17:35 - 01588096 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\MSSP7GE.DLL
2012-06-08 21:53 - 2012-06-08 21:53 - 00307344 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\mscss7ge.dll
2010-12-21 03:29 - 2010-12-21 03:29 - 00471984 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\css7Data0007.dll
2011-09-13 07:42 - 2011-09-13 07:42 - 03214056 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\1033\MSGR3EN.DLL
2011-01-07 17:35 - 2011-01-07 17:35 - 01588096 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\MSSP7EN.DLL
2012-06-08 21:53 - 2012-06-08 21:53 - 00307344 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\mscss7en.dll
2011-01-07 17:35 - 2011-01-07 17:35 - 00495024 _____ (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\css7Data0009.dll
2012-07-26 16:22 - 2012-07-26 16:22 - 00828872 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MSVCR110.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00107008 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\MAILRT2.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 00080896 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\WLDCore.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 00049664 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\wldlog.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 02698752 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\MSMAIL.DLL
2012-09-12 16:58 - 2012-09-12 16:58 - 00205312 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\MAILACCT.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00764416 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\MAILCOMM.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 02568704 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\UXCore.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 00604160 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\uxcontacts.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 00115200 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\UXCalendar.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 02833920 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\wlidux.dll
2012-07-26 01:27 - 2012-07-26 05:08 - 00889344 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\wlidcli.dll
2012-09-12 16:54 - 2012-09-12 16:54 - 03112960 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\uxctl.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00187392 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\WCSTORE.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00187392 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\WCICS.dll
2012-09-12 16:51 - 2012-09-12 16:51 - 00325632 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\condb.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00177152 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Shared\WLBici.dll
2012-07-26 02:06 - 2012-07-26 05:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\Cabinet.dll
2012-09-12 16:51 - 2012-09-12 16:51 - 00051200 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\conproxy.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00030720 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wcstoreproxy.dll
2010-02-28 03:13 - 2010-02-28 03:13 - 00049024 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
2012-09-12 16:51 - 2012-09-12 16:51 - 00705024 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\lmcdata.dll
2012-11-29 21:49 - 2012-09-20 08:30 - 02219008 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\d3d10warp.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00171520 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wcsync.dll
2012-09-12 16:51 - 2012-09-12 16:51 - 01083904 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\LivePlatform.dll
2012-09-12 16:48 - 2012-09-12 16:48 - 00925696 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\PresenceIM.dll
2012-09-12 16:48 - 2012-09-12 16:48 - 00678912 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\LiveTransport.dll
2012-09-12 16:48 - 2012-09-12 16:48 - 00413184 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\ObjectStore.dll
2012-09-12 16:48 - 2012-09-12 16:48 - 00306688 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\LiveNatTrav.dll
2013-07-10 18:15 - 2013-04-23 00:08 - 05940888 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
2013-07-13 18:03 - 2013-07-13 18:03 - 11500032 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\d1ce70bf6cbab6ab838cbd8b50e902c1\mscorlib.ni.dll
2012-08-02 15:33 - 2012-07-26 12:07 - 00074824 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 03100160 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.PostEditor.dll
2013-01-09 18:08 - 2012-10-09 04:23 - 00364656 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00200192 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Interop.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00146944 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Mshtml.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00335360 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.HtmlEditor.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00622080 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.ApplicationFramework.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 01166848 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.CoreServices.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00192000 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Interop.Mshtml.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00056832 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Passport.dll
2013-08-16 10:52 - 2013-08-16 10:52 - 07988736 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System\1b46657236c1f942f9dbaf6aac73bb49\System.ni.dll
2013-08-16 14:51 - 2013-08-16 14:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e4447d26cd9083018bd28ddd60a0248\System.Drawing.ni.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 01170944 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Localization.dll
2013-08-16 14:51 - 2013-08-16 14:51 - 12436480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6b49661877ca78101ebc697b9a6a95fd\System.Windows.Forms.ni.dll
2013-08-19 11:41 - 2013-08-19 11:41 - 00978432 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\67ca465023d310bef5d3285a39444f14\System.Configuration.ni.dll
2013-08-16 14:51 - 2013-08-16 14:51 - 05464064 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\fc5d4ada42ed8e9a30b64912f5dc9767\System.Xml.ni.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00065024 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Api.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00368128 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLiveLocal.WriterPlugin.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00347648 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Controls.dll
2012-09-12 16:57 - 2012-09-12 16:57 - 00282112 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00077312 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.HtmlParser.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00343552 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.BlogClient.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00065024 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.Extensibility.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00142848 _____ (Microsoft Corp.) C:\Program Files (x86)\Windows Live\Writer\WindowsLive.Writer.SpellChecker.dll
2013-07-15 17:33 - 2013-07-15 17:33 - 00025600 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\92229fdcf8b5abcc414baf6141f94495\Accessibility.ni.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\msfeeds.dll
2012-07-26 04:33 - 2012-07-26 04:33 - 00005120 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\security.dll
2012-11-29 21:27 - 2012-09-14 00:04 - 00315392 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
2012-09-12 16:53 - 2012-09-12 16:53 - 00155648 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.Application.dll
2012-09-12 16:58 - 2012-09-12 16:58 - 00634880 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\WLMFilter.dll
2012-07-26 03:28 - 2012-07-26 05:05 - 00096256 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\hlink.dll
2012-09-12 16:51 - 2012-09-12 16:51 - 00485376 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\consync.dll
2012-09-12 16:51 - 2012-09-12 16:51 - 01083904 _____ (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\abssm.dll
2012-07-26 02:22 - 2012-07-26 05:05 - 00949760 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\inetcomm.dll
2012-07-26 02:22 - 2012-07-26 05:06 - 00111104 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\MSOERT2.dll
2012-07-26 04:33 - 2012-07-26 04:33 - 00084480 _____ (Microsoft Corporation) C:\Windows\SYSTEM32\inetres.dll
==================== Alternate Data Streams (whitelisted) ==========
AlternateDataStreams: C:\Users\Renate\Desktop\Thumbs.db:encryptable
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/03/2013 11:38:07 AM) (Source: Application Hang) (User: )
Description: Programm psi.exe, Version 3.0.0.6001 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 162c
Startzeit: 01cea88908ca05f4
Endzeit: 0
Anwendungspfad: C:\Program Files (x86)\Secunia\PSI\psi.exe
Berichts-ID: 85e6e004-147c-11e3-beba-dc85de3c3bed
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (09/03/2013 11:36:04 AM) (Source: FSecure-FSecure-F-Secure DeepGuard) (User: )
Description: 1 2013-09-03 11:36:04+02:00 RENATESPC SYSTEM F-Secure DeepGuard
Application was blocked. This was determined to be a high-risk application by system control heuristics.
Application path: \\?\c:\users\renate\appdata\roaming\windows net data\net.exe
File hash: 2f016f395da134cb240a375bd4afe67bc4f4aace
Error: (09/03/2013 11:30:13 AM) (Source: FSecure-FSecure-F-Secure DeepGuard) (User: )
Description: 3 2013-09-03 11:30:12+02:00 RENATESPC SYSTEM F-Secure DeepGuard
Application was blocked. This was determined to be a high-risk application by system control heuristics.
Application path: \\?\c:\users\renate\appdata\local\temp\is-iisl7.tmp\9160.exe
File hash: 939b83386f9286a420172f78f02035dfb941bfa0
Error: (09/02/2013 02:12:15 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (09/02/2013 02:04:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (09/02/2013 00:01:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16660, Zeitstempel: 0x51f1c5f3
Name des fehlerhaften Moduls: WOT.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x501a9970
Ausnahmecode: 0xc0000005
Fehleroffset: 0x066d7fdd
ID des fehlerhaften Prozesses: 0x564c
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5
Error: (09/01/2013 00:11:57 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (08/31/2013 01:58:59 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (08/30/2013 06:57:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Error: (08/30/2013 06:57:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
System errors:
=============
Error: (08/28/2013 09:24:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSDP-Suche" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/28/2013 09:24:22 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SSDPSRV erreicht.
Error: (08/28/2013 09:23:52 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst upnphost erreicht.
Error: (08/28/2013 09:23:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSDP-Suche" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/28/2013 09:23:22 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SSDPSRV erreicht.
Error: (08/28/2013 09:22:52 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst upnphost erreicht.
Error: (08/28/2013 09:22:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSDP-Suche" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/28/2013 09:22:22 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SSDPSRV erreicht.
Error: (08/27/2013 07:51:11 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst upnphost erreicht.
Error: (08/27/2013 07:25:30 PM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Zeitbroker" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Microsoft Office Sessions:
=========================
Error: (09/03/2013 11:38:07 AM) (Source: Application Hang)(User: )
Description: psi.exe3.0.0.6001162c01cea88908ca05f40C:\Program Files (x86)\Secunia\PSI\psi.exe85e6e004-147c-11e3-beba-dc85de3c3bed
Error: (09/03/2013 11:36:04 AM) (Source: FSecure-FSecure-F-Secure DeepGuard)(User: )
Description: 1 2013-09-03 11:36:04+02:00 RENATESPC SYSTEM F-Secure DeepGuard
Application was blocked. This was determined to be a high-risk application by system control heuristics.
Application path: \\?\c:\users\renate\appdata\roaming\windows net data\net.exe
File hash: 2f016f395da134cb240a375bd4afe67bc4f4aace
Error: (09/03/2013 11:30:13 AM) (Source: FSecure-FSecure-F-Secure DeepGuard)(User: )
Description: 3 2013-09-03 11:30:12+02:00 RENATESPC SYSTEM F-Secure DeepGuard
Application was blocked. This was determined to be a high-risk application by system control heuristics.
Application path: \\?\c:\users\renate\appdata\local\temp\is-iisl7.tmp\9160.exe
File hash: 939b83386f9286a420172f78f02035dfb941bfa0
Error: (09/02/2013 02:12:15 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\WinZip\adxloader.dll.Manifestc:\program files (x86)\WinZip\adxloader.dll.Manifest2
Error: (09/02/2013 02:04:41 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\WinZip\adxloader.dll.Manifestc:\program files (x86)\WinZip\adxloader.dll.Manifest2
Error: (09/02/2013 00:01:39 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.1666051f1c5f3WOT.dll_unloaded0.0.0.0501a9970c0000005066d7fdd564c01cea7c35cb03433C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEWOT.dlla8b218be-13b6-11e3-beb9-dc85de3c3bed
Error: (09/01/2013 00:11:57 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (08/31/2013 01:58:59 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (08/30/2013 06:57:00 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Users\Renate\Downloads\SoftonicDownloader_fuer_quicktime.exe
Error: (08/30/2013 06:57:00 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Users\Renate\Downloads\SoftonicDownloader_fuer_hexonic-scantopdf.exe
CodeIntegrity Errors:
===================================
Date: 2013-04-09 17:04:07.964
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-04-09 17:04:05.942
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-04-09 17:04:03.919
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-04-09 17:04:01.818
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-04-09 17:03:59.787
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-04-09 17:03:57.756
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 27%
Total physical RAM: 8077.6 MB
Available physical RAM: 5832 MB
Total Pagefile: 9293.6 MB
Available Pagefile: 6230.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:279.45 GB) (Free:195.53 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:398.18 GB) (Free:396.37 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 699 GB) (Disk ID: F05DB9F1)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
03.09.2013, 20:17
| #5 |
| /// the machine /// TB-Ausbilder | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.09.2013, 18:47
| #6 |
| | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Hi Schrauber, hier das Logfile von Malewarebytes. Gruß Renate47 Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.04.07 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16660 Renate :: RENATESPC [Administrator] 04.09.2013 18:43:19 mbam-log-2013-09-04 (18-43-19).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 243697 Laufzeit: 4 Minute(n), 5 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 52 HKLM\SYSTEM\CurrentControlSet\Services\SProtection (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0af350d9-3916-454b-ac53-0b0b65f41301} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1 (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Business.Tinyfying.DownloadArgs (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Business.Tinyfying.LinkToPromoteArgs (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Business.Tinyfying.RawDataArgs (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Business.Tinyfying.TinyUrlArgs (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Business.Tinyfying.ViralLinkArgs (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.ClientCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.ContractBase (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GameOverCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetCreditCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetVariableCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.GetVariableResult (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.InstallationContextResult (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.LoadContentCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.LoginCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.LogoutCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.MyAccountCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.PlayContentCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.PostContentCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.SetVariableCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.TestContentCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.WarmUpCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.DataContracts.WelcomeCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.ServerCommand (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.Communication.ServerResult (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.LightContent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.LightUri (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Iminent.Mediator.MediatorServiceProxy (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\IMINENT (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\UMBRELLA (PUP.Optional.Umbrella.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\IMINENT (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 4 HKCU\Software\Iminent|SearchEngineOptin (PUP.Optional.Iminent.A) -> Daten: 0 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Umbrella|MUpdBlock (PUP.Optional.Umbrella.A) -> Daten: { "MASSUPDATE" : { "CHROME_MBAR" : { "Checked" : 1, "RetryIdx" : 0, "Version" : 1 }, "FIREFOX_MBAR" : { "Checked" : 1, "RetryIdx" : 0, "Version" : 1 } } } -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\SProtection|ImagePath (PUP.Optional.Iminent.A) -> Daten: C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\Iminent|RefererId (PUP.Optional.Iminent.A) -> Daten: 768 -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 8 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com/) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (Hijack.SearchPage) -> Bösartig: (hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=) Gut: (hxxp://www.google.com/) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 24 C:\Program Files (x86)\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\Bootstrapper (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\ro (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\chrome (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\components (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\plugins (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Iminent\Mediator (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Iminent\Mediator\Datas (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Iminent\Mediator\Datas\Cache (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Iminent\Mediator\Datas\Cache\apix.iminent.com (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\Iminent\Mediator (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\Iminent\Mediator\Datas (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 128 C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\$Recycle.Bin\S-1-5-21-4140535175-895356475-445613732-1002\$R9YTPPH.exe (Adware.Bundler) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\$Recycle.Bin\S-1-5-21-4140535175-895356475-445613732-1002\$RBT4DJH.exe (Adware.Bundler) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\Downloads\SoftonicDownloader_fuer_deepnet-explorer.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\Downloads\SoftonicDownloader_fuer_hexonic-scantopdf.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\Downloads\SoftonicDownloader_fuer_quicktime.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\Downloads\windows-start-menu-vistart_8.1.0.exe (Adware.Bundler) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Installer\8c8a626.msi (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\SearchTheWeb.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\f_in_box.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.AxImp.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Booster.UI.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Business.Connect.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Business.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Business.tlb (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Entity.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.exe.config (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.InstallLog (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.InstallState (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Mediator.ActivePlayers.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Mediator.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Mediator.tlb (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Messengers.exe.config (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Services.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.WinCore.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.WinCore.WLM.WinEvents.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.WinCore.WLM15.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.WinCore.Yahoo.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Windows.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Iminent.Workflow.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Microsoft.DirectX.AudioVideoPlayback.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\Microsoft.Expression.Interactions.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\StartWeb.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\System.Data.SQLite.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\System.Data.SQLite.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\System.Windows.Interactivity.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\System.Windows.Interactivity.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\USearch.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\WPFLocalizeExtension.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\WPFLocalizeExtension.xml (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\de\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\en\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\es\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\fr\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\main.ico (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\msacm32.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\Universely.ico (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\it\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\ro\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\ro\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\ro\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Iminent\tr\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\SearchTheWeb.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Blog.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\FAQ.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Help.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Iminent.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\home.htm (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\jquery-ui-1.10.1.custom.min.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\jquiso.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\socket.io.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\style.css (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\SimplyTech\home\vars.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\Microsoft.Win32.TaskScheduler.xml (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\cinshlpr.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\hometab_icon.ico (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\InstallHelper.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\Interop.IWshRuntimeLibrary.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\Microsoft.Win32.TaskScheduler.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\ProtectedSearch.ico (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\STInst64.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\STInst64.exe (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\System.Data.SQLite.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\TaskSchedulerCreator.exe (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\TBUpdater.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\ToolbarUninstall.exe (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\unins000.dat (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\unins000.exe (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome.manifest (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\install.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\install.rdf (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\pop.htm (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome\HomeTab_3869.jar (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\components\wtb_complete.js (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HomeTab\support@HomeTab.com\plugins\npwiddit.dll (PUP.Optional.HomeTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Iminent\Mediator\Datas\Cache\apix.iminent.com\1031.11575f00-7bdc-4181-ba0a-b298aeab228c.dat (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\Iminent\Mediator\Datas\globalcache.dat (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Renate\AppData\Roaming\Iminent\Mediator\Datas\user.dat (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.002 - Bericht erstellt am 04/09/2013 um 19:07:07
# Updated 01/09/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Renate - RENATESPC
# Gestartet von : C:\Users\Renate\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : SProtection
[#] Dienst Gelöscht : SystemStoreService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Iminent
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Covus Freemium
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeTab
Ordner Gelöscht : C:\Program Files (x86)\Covus Freemium
Ordner Gelöscht : C:\Program Files (x86)\FoxyDeal
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Umbrella
Ordner Gelöscht : C:\Users\Renate\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Renate\AppData\Local\Freemium
Ordner Gelöscht : C:\Users\Renate\AppData\LocalLow\HomeTab
Ordner Gelöscht : C:\Users\Renate\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\Renate\AppData\Roaming\HomeTab
Ordner Gelöscht : C:\Users\Renate\AppData\Roaming\Iminent
Ordner Gelöscht : C:\Users\Renate\AppData\Roaming\SimplyTech
Ordner Gelöscht : C:\Users\Renate\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\Extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}
Ordner Gelöscht : C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan
Ordner Gelöscht : C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgibjgmnimooanbagcfpnkmngejcojaf
Datei Gelöscht : C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
Datei Gelöscht : C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Web Search.xml
Datei Gelöscht : C:\Windows\System32\Tasks\Browser Updater
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\fgibjgmnimooanbagcfpnkmngejcojaf
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.Band
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.Band.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.NotificationSource
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ViUpdater]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BA696155-D96E-4281-B467-0367A0456474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA696155-D96E-4281-B467-0367A0456474}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA696155-D96E-4281-B467-0367A0456474}
[#] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA696155-D96E-4281-B467-0367A0456474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA696155-D96E-4281-B467-0367A0456474}]
Schlüssel Gelöscht : HKCU\Software\FoxyDeal
Schlüssel Gelöscht : HKCU\Software\HomeTab
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gelöscht : HKLM\Software\Covus Freemium GmbH
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15B291FD-AA72-4D0B-BD6E-604F24C5D14C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{421d35e3-d4bd-47a6-b6aa-d21ade07cf32}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5CDCDBCD-119A-4AE1-9C55-B816DBBE4245}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FoxyDeal
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=4.6&ts=1374658156947.000005&tguid=46364-3869-1374658156947-113E021459652FC25E387DC906D608BF&st=chrome&q=");
-\\ Google Chrome v
[ Datei : C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [19354 octets] - [04/09/2013 19:05:57]
AdwCleaner[S0].txt - [17703 octets] - [04/09/2013 19:07:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17764 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.7 (09.01.2013:1)
OS: Windows 8 x64
Ran by Renate on 04.09.2013 at 19:35:01,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EFC72FFC-6E60-4086-9B91-5DEEE605E090}
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.09.2013 at 19:38:26,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
last but not least hier jetzt auch noch das FRST-Logfile. Viele Grüße Renate47 FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 03
Ran by Renate (administrator) on RENATESPC on 04-09-2013 19:43:00
Running from C:\Users\Renate\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Atheros Commnucations) C:\Windows\system32\AdminService.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE
() C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Intel Corporation) C:\Windows\system32\igfxpers.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\Plugins\MetroProvider.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Dominik Reichl) C:\Users\Renate\Downloads\KeePass-1.26\KeePass-1-26.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Thisisu) C:\Users\Renate\Downloads\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\ViStart.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM\...\Run: [EPSON Stylus DX4200] - C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIAEE.EXE /F "C:\Windows\TEMP\E_SC1C4.tmp" /EF "HKLM" [x]
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272640 2012-09-12] (Microsoft Corporation)
HKCU\...\Run: [ViStart] - C:\Program Files (x86)\ViStart\ViStart.exe [1269760 2013-01-29] (Lee-Soft.com)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1511792 2013-03-28] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [38112 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2012-11-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-02] (F-Secure Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Device Detector] - DevDetect.exe -autorun [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [F-Secure Hoster (666)] - C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll, C:\Windows\SysWOW64\nvinit.dll [247144 2012-10-08] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {EFC72FFC-6E60-4086-9B91-5DEEE605E090} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\bh\zonealarm.dll (Check Point Software Technologies LTD)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default
FF NewTab: about:home
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: about:newtab?source=home
CHR RestoreOnStartup: "about:newtab?source=home"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (WOT) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.13_0
CHR Extension: (YouTube) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
==================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2012-08-29] (Atheros Commnucations)
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-02] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-25] (F-Secure Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MySQLServer; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14249 2013-03-22] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-08-21] ()
R0 fsbts; C:\Windows\SysWow64\Drivers\fsbts.sys [42248 2013-03-18] ()
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [284008 2012-10-08] (NVIDIA Corporation)
S3 AthBTPort; \SystemRoot\system32\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP; \SystemRoot\system32\drivers\btath_a2dp.sys [x]
S3 btath_avdt; \SystemRoot\system32\drivers\btath_avdt.sys [x]
S3 BTATH_BUS; \SystemRoot\System32\drivers\btath_bus.sys [x]
S3 BTATH_HCRP; \SystemRoot\System32\drivers\btath_hcrp.sys [x]
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP; \SystemRoot\System32\drivers\btath_rcp.sys [x]
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-04 19:35 - 2013-09-04 19:35 - 00000000 ____D C:\Windows\ERUNT
2013-09-04 19:31 - 2013-09-04 19:31 - 01028757 _____ (Thisisu) C:\Users\Renate\Downloads\JRT.exe
2013-09-04 19:23 - 2013-09-04 19:23 - 01950416 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-04 19:05 - 2013-09-04 19:07 - 00000000 ____D C:\AdwCleaner
2013-09-04 19:03 - 2013-09-04 19:03 - 01037222 _____ C:\Users\Renate\Downloads\adwcleaner.exe
2013-09-04 19:01 - 2013-09-04 19:01 - 00001128 _____ C:\Users\Renate\Desktop\Continue Zip Opener Installation.lnk
2013-09-04 18:40 - 2013-09-04 18:40 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-04 18:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-04 18:37 - 2013-09-04 18:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Renate\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-03 15:14 - 2013-09-03 15:14 - 00000000 ____D C:\Users\Renate\AppData\Local\Macromedia
2013-09-03 15:13 - 2013-09-04 19:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 15:13 - 2013-09-03 15:13 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-03 14:35 - 2013-09-03 14:36 - 00086496 _____ C:\Users\Renate\Downloads\Addition.txt
2013-09-03 14:33 - 2013-09-03 14:33 - 00000000 ____D C:\FRST
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 09:49 - 2013-08-16 09:52 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:38 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 09:38 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 09:38 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 09:38 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 02:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-16 09:37 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 09:36 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 09:23 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-16 09:23 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-16 09:20 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-16 09:20 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-16 09:20 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 18:56 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-15 18:56 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:04 - 2013-08-13 12:12 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:02 - 2013-08-13 12:12 - 00000000 ____D C:\ProgramData\AAV
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
2013-08-06 09:31 - 2013-09-04 19:08 - 00046574 _____ C:\Windows\PFRO.log
2013-08-05 18:51 - 2013-08-26 11:45 - 00000000 ____D C:\Users\Renate\AppData\Local\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\ProgramData\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\Program Files (x86)\WinZip
2013-08-05 18:49 - 2013-08-05 18:50 - 51187712 _____ C:\Users\Renate\Downloads\wz175-32gev.msi
2013-08-05 12:16 - 2013-08-21 17:21 - 07684479 _____ C:\Windows\FSISU.log
2013-08-05 12:16 - 2013-08-21 17:21 - 01779944 _____ C:\Windows\FSSFM.log
2013-08-05 12:16 - 2013-08-21 17:21 - 01540018 _____ C:\Windows\FSSETUP.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00294760 _____ C:\Windows\FSDEPH.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00272420 _____ C:\Windows\FSPROD.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00229964 _____ C:\Windows\RunSetup.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00142032 _____ C:\Windows\FSAVINST.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00012390 _____ C:\Windows\FSAVCSIN.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00008044 _____ C:\Windows\FSGKIAIN.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00003650 _____ C:\Windows\FSLDIN.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00003415 _____ C:\Windows\fsavunin.log
2013-08-05 12:16 - 2013-08-21 17:21 - 00002380 _____ C:\Windows\DAASINST.LOG
2013-08-05 12:16 - 2013-08-21 17:21 - 00001314 _____ C:\Windows\fsav_db_setup.log
2013-08-05 12:16 - 2013-08-21 17:20 - 00038536 _____ C:\Windows\fspplugin.log
2013-08-05 12:15 - 2013-08-05 12:15 - 00001945 _____ C:\Users\Public\Desktop\F-Secure.lnk
==================== One Month Modified Files and Folders =======
2013-09-04 19:41 - 2012-11-29 21:21 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4140535175-895356475-445613732-1002
2013-09-04 19:38 - 2013-09-04 19:38 - 00001076 _____ C:\Users\Renate\Desktop\JRT.txt
2013-09-04 19:36 - 2012-12-02 14:40 - 00000000 ____D C:\Users\Renate\AppData\Local\CrashDumps
2013-09-04 19:35 - 2013-09-04 19:35 - 00000000 ____D C:\Windows\ERUNT
2013-09-04 19:34 - 2012-11-29 21:10 - 02084163 _____ C:\Windows\WindowsUpdate.log
2013-09-04 19:31 - 2013-09-04 19:31 - 01028757 _____ (Thisisu) C:\Users\Renate\Downloads\JRT.exe
2013-09-04 19:29 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-09-04 19:23 - 2013-09-04 19:23 - 01950416 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-04 19:10 - 2012-11-30 10:14 - 00000500 _____ C:\Users\Renate\AppData\Roaming\sp_data.sys
2013-09-04 19:09 - 2013-02-05 20:50 - 00000646 _____ C:\Windows\Tasks\Scheduled scanning task.job
2013-09-04 19:09 - 2012-09-07 11:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-04 19:09 - 2012-09-07 11:28 - 00000868 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-09-04 19:09 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-04 19:08 - 2013-08-06 09:31 - 00046574 _____ C:\Windows\PFRO.log
2013-09-04 19:08 - 2012-07-26 07:26 - 01048576 ___SH C:\Windows\system32\config\BBI
2013-09-04 19:07 - 2013-09-04 19:05 - 00000000 ____D C:\AdwCleaner
2013-09-04 19:07 - 2013-07-24 11:29 - 00000000 ____D C:\Windows\System32\Tasks\Browser Updater
2013-09-04 19:07 - 2012-11-29 21:13 - 00000000 ___RD C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-04 19:05 - 2013-09-03 15:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-04 19:03 - 2013-09-04 19:03 - 01037222 _____ C:\Users\Renate\Downloads\adwcleaner.exe
2013-09-04 19:01 - 2013-09-04 19:01 - 00001128 _____ C:\Users\Renate\Desktop\Continue Zip Opener Installation.lnk
2013-09-04 18:40 - 2013-09-04 18:40 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-04 18:37 - 2013-09-04 18:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Renate\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-04 18:36 - 2013-02-05 20:50 - 00003418 _____ C:\Windows\System32\Tasks\Scheduled scanning task
2013-09-04 18:35 - 2012-12-02 17:35 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E165C355-7056-450E-828D-23AFC16DD271}
2013-09-04 18:32 - 2012-12-02 14:01 - 00000000 ____D C:\Users\Renate\AppData\Local\Windows Live
2013-09-03 17:27 - 2012-09-07 11:28 - 00000870 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-03 15:14 - 2013-09-03 15:14 - 00000000 ____D C:\Users\Renate\AppData\Local\Macromedia
2013-09-03 15:13 - 2013-09-03 15:13 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-03 15:13 - 2012-11-29 23:45 - 00000000 ____D C:\Users\Renate\AppData\Local\Adobe
2013-09-03 15:13 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\McAfee
2013-09-03 14:36 - 2013-09-03 14:35 - 00086496 _____ C:\Users\Renate\Downloads\Addition.txt
2013-09-03 14:33 - 2013-09-03 14:33 - 00000000 ____D C:\FRST
2013-09-03 12:26 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:29 - 2013-01-13 17:32 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-09-02 18:00 - 2012-08-03 01:02 - 00753596 _____ C:\Windows\system32\perfh007.dat
2013-09-02 18:00 - 2012-08-03 01:02 - 00155998 _____ C:\Windows\system32\perfc007.dat
2013-09-02 18:00 - 2012-07-26 09:28 - 01746930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 18:57 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViStart
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:54 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-26 11:45 - 2013-08-05 18:51 - 00000000 ____D C:\Users\Renate\AppData\Local\WinZip
2013-08-26 09:44 - 2012-11-30 10:25 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-08-22 12:51 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-08-21 17:30 - 2013-01-02 19:01 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:21 - 2013-08-05 12:16 - 07684479 _____ C:\Windows\FSISU.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01779944 _____ C:\Windows\FSSFM.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01540018 _____ C:\Windows\FSSETUP.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00294760 _____ C:\Windows\FSDEPH.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00272420 _____ C:\Windows\FSPROD.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00229964 _____ C:\Windows\RunSetup.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00142032 _____ C:\Windows\FSAVINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00012390 _____ C:\Windows\FSAVCSIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00008044 _____ C:\Windows\FSGKIAIN.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00003650 _____ C:\Windows\FSLDIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00003415 _____ C:\Windows\fsavunin.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00002380 _____ C:\Windows\DAASINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00001314 _____ C:\Windows\fsav_db_setup.log
2013-08-21 17:21 - 2013-01-02 18:55 - 00019829 _____ C:\Windows\prodsett_copy.ini
2013-08-21 17:20 - 2013-08-05 12:16 - 00038536 _____ C:\Windows\fspplugin.log
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-16 09:52 - 2013-08-16 09:49 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:49 - 2012-12-12 22:34 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Users\Renate\AppData\Roaming\ViStart
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViUpdater
2013-08-15 18:06 - 2013-04-18 15:50 - 00116224 ___SH C:\Users\Renate\Desktop\Thumbs.db
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-15 18:04 - 2012-11-29 21:10 - 00000000 ____D C:\Users\Renate
2013-08-13 12:32 - 2013-04-04 18:46 - 00000000 ____D C:\Users\Renate\AppData\Roaming\elsterformular
2013-08-13 12:31 - 2013-04-04 18:45 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:12 - 2013-08-13 12:04 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:12 - 2013-08-13 12:02 - 00000000 ____D C:\ProgramData\AAV
2013-08-13 08:38 - 2013-07-24 11:29 - 00032328 _____ C:\Windows\Launcher.exe
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-07 19:31 - 2012-09-07 11:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
2013-08-06 09:31 - 2013-01-02 14:00 - 00000000 ____D C:\Program Files (x86)\F-Secure
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\ProgramData\WinZip
2013-08-05 18:51 - 2013-08-05 18:51 - 00000000 ____D C:\Program Files (x86)\WinZip
2013-08-05 18:50 - 2013-08-05 18:49 - 51187712 _____ C:\Users\Renate\Downloads\wz175-32gev.msi
2013-08-05 12:15 - 2013-08-05 12:15 - 00001945 _____ C:\Users\Public\Desktop\F-Secure.lnk
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\Users\Renate\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Renate\AppData\Local\Temp\Quarantine.exe
C:\Users\Renate\AppData\Local\Temp\tbuE1F9.exe
C:\Users\Renate\AppData\Local\Temp\nsf2BA.tmp\ShellLink.dll
C:\Users\Renate\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\UpdatusUser\AppData\Local\Temp\nsgE511.tmp\System.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-30 10:24
==================== End Of Log ============================
--- --- --- --- --- --- |
|
05.09.2013, 07:57
| #7 |
| /// the machine /// TB-Ausbilder | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.09.2013, 17:16
| #8 |
| | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Hallo Schrauber, hier das ESET-Logfile. Allerdings hat ESET keinen Scan meiner externen Festplatte geschafft. Beim ersten Versuch ist er bei 75% stehen geblieben, beim zweiten Versuch hat er nach einer Weile nur noch einen grauen Bildschirm angezeigt. Kann das eventuell daran liegen, dass auf der Platte einige verschlüsselte Dateien liegen? Viele Grüße Renate47 Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=290c97086927c34d9d14f24b06d0cb10
# engine=15025
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-06 10:15:07
# local_time=2013-09-06 12:15:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=5893 16776574 100 94 1787854 5745982 0 0
# scanned=263905
# found=0
# cleaned=0
# scan_time=9478
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=290c97086927c34d9d14f24b06d0cb10
# engine=15025
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-06 10:15:07
# local_time=2013-09-06 12:15:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=5893 16776574 100 94 1787854 5745982 0 0
# scanned=263905
# found=0
# cleaned=0
# scan_time=9478
und jetzt auch noch ein neues FRST Logfile. Das lästige HomeTab ist inzwischen verschwunden, sonst hatte ich selbt keine Probleme erkannt. Deine Anleitungen waren wirklich wunderbar verständlich und präzise, ganz herzlichen Dank dafür. Eigentlich versuche ich ja, immer vorsichtig zu sein, nicht auf alles gleich zu klicken und nur von vertrauenswürdigen Sites wie Heise oder Chip etwas herunterzuladen. Ich öffne nur Seiten, die in WOT grün sind, habe Secunia installiert etc. Trotzdem hat sich etwas eingeschlichen und die Wahrscheinlichkeit, dass es irgendwann wieder passiert, ist relativ hoch. Deshalb eine Frage: ich habe ja jetzt bei dieser Aktion einige Tools gestartet, die Malware entfernen. Würdest Du empfehlen, diese Tools prophylaktisch von Zeit zu Zeit laufen zu lassen, damit Malware, die man vielleicht noch gar nicht bemerkt hat, gleich entfernt wird? Viele Grüße Renate FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013
Ran by Renate (administrator) on RENATESPC on 06-09-2013 18:06:09
Running from C:\Users\Renate\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Atheros Commnucations) C:\Windows\system32\AdminService.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSHDLL64.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\ViStart.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(Intel Corporation) C:\Windows\system32\igfxpers.exe
(Lee-Soft.com) C:\Program Files (x86)\ViStart\Plugins\MetroProvider.exe
(Lee Chantrey) C:\Program Files (x86)\ViStart\Plugins\SearchProvider.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dominik Reichl) C:\Users\Renate\Downloads\KeePass-1.26\KeePass-1-26.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Renate\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM\...\Run: [EPSON Stylus DX4200] - C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIAEE.EXE /F "C:\Windows\TEMP\E_SC1C4.tmp" /EF "HKLM" [x]
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272640 2012-09-12] (Microsoft Corporation)
HKCU\...\Run: [ViStart] - C:\Program Files (x86)\ViStart\ViStart.exe [1269760 2013-01-29] (Lee-Soft.com)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1511792 2013-03-28] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [38112 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2012-11-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-02] (F-Secure Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Device Detector] - DevDetect.exe -autorun [x]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [F-Secure Hoster (666)] - C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll, C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\bh\zonealarm.dll (Check Point Software Technologies LTD)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.11.11\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default
FF NewTab: about:home
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\551rx3tj.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: about:newtab?source=home
CHR RestoreOnStartup: "about:newtab?source=home"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (WOT) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.13_0
CHR Extension: (YouTube) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
==================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2012-08-29] (Atheros Commnucations)
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-02] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-25] (F-Secure Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MySQLServer; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14249 2013-03-22] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-21] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-06-25] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-08-21] ()
R0 fsbts; C:\Windows\SysWow64\Drivers\fsbts.sys [42248 2013-03-18] ()
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-02] ()
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [284008 2012-10-08] (NVIDIA Corporation)
S3 AthBTPort; \SystemRoot\system32\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP; \SystemRoot\system32\drivers\btath_a2dp.sys [x]
S3 btath_avdt; \SystemRoot\system32\drivers\btath_avdt.sys [x]
S3 BTATH_BUS; \SystemRoot\System32\drivers\btath_bus.sys [x]
S3 BTATH_HCRP; \SystemRoot\System32\drivers\btath_hcrp.sys [x]
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP; \SystemRoot\System32\drivers\btath_rcp.sys [x]
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-06 09:34 - 2013-09-06 09:34 - 02347384 _____ (ESET) C:\Users\Renate\Downloads\esetsmartinstaller_enu(1).exe
2013-09-05 12:06 - 2013-09-05 12:06 - 02347384 _____ (ESET) C:\Users\Renate\Downloads\esetsmartinstaller_enu.exe
2013-09-04 21:11 - 2013-09-04 21:43 - 1925187635 _____ C:\Users\Renate\Downloads\veloeurope.7z
2013-09-04 21:09 - 2013-09-04 21:10 - 377588037 _____ C:\Users\Renate\Downloads\veloeurope.exe
2013-09-04 19:38 - 2013-09-04 19:38 - 00001076 _____ C:\Users\Renate\Desktop\JRT.txt
2013-09-04 19:35 - 2013-09-04 19:35 - 00000000 ____D C:\Windows\ERUNT
2013-09-04 19:31 - 2013-09-04 19:31 - 01028757 _____ (Thisisu) C:\Users\Renate\Downloads\JRT.exe
2013-09-04 19:23 - 2013-09-06 18:05 - 01948360 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-04 19:05 - 2013-09-04 19:07 - 00000000 ____D C:\AdwCleaner
2013-09-04 19:03 - 2013-09-04 19:03 - 01037222 _____ C:\Users\Renate\Downloads\adwcleaner.exe
2013-09-04 19:01 - 2013-09-04 19:01 - 00001128 _____ C:\Users\Renate\Desktop\Continue Zip Opener Installation.lnk
2013-09-04 18:40 - 2013-09-04 18:40 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-04 18:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-04 18:37 - 2013-09-04 18:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Renate\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-03 15:14 - 2013-09-03 15:14 - 00000000 ____D C:\Users\Renate\AppData\Local\Macromedia
2013-09-03 15:13 - 2013-09-06 18:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 15:13 - 2013-09-03 15:13 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-03 14:35 - 2013-09-03 14:36 - 00086496 _____ C:\Users\Renate\Downloads\Addition.txt
2013-09-03 14:33 - 2013-09-03 14:33 - 00000000 ____D C:\FRST
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:25 - 2013-08-21 17:26 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 09:49 - 2013-08-16 09:52 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:38 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-16 09:38 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 09:38 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 09:38 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 09:38 - 2013-07-26 05:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 09:38 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 09:38 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 09:38 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 09:38 - 2013-07-26 02:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-16 09:37 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 09:37 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 09:37 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 09:36 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 09:23 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-16 09:23 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-16 09:20 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-16 09:20 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-16 09:20 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 18:56 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 18:56 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-15 18:56 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-15 18:56 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:04 - 2013-08-13 12:12 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:02 - 2013-08-13 12:12 - 00000000 ____D C:\ProgramData\AAV
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-08-11 18:27 - 2013-09-03 12:08 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
==================== One Month Modified Files and Folders =======
2013-09-06 18:05 - 2013-09-04 19:23 - 01948360 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2013-09-06 18:05 - 2013-09-03 15:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 18:02 - 2013-09-06 18:02 - 00891115 _____ C:\Users\Renate\Downloads\SecurityCheck.exe
2013-09-06 18:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-09-06 17:58 - 2012-11-29 21:10 - 01552922 _____ C:\Windows\WindowsUpdate.log
2013-09-06 17:27 - 2012-09-07 11:28 - 00000870 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-06 09:41 - 2012-11-29 21:21 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4140535175-895356475-445613732-1002
2013-09-06 09:34 - 2013-09-06 09:34 - 02347384 _____ (ESET) C:\Users\Renate\Downloads\esetsmartinstaller_enu(1).exe
2013-09-06 09:28 - 2012-12-02 14:01 - 00000000 ____D C:\Users\Renate\AppData\Local\Windows Live
2013-09-06 09:24 - 2012-11-30 10:14 - 00000500 _____ C:\Users\Renate\AppData\Roaming\sp_data.sys
2013-09-06 09:24 - 2012-09-07 11:28 - 00000868 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-09-06 09:23 - 2013-02-05 20:50 - 00003418 _____ C:\Windows\System32\Tasks\Scheduled scanning task
2013-09-06 09:23 - 2013-02-05 20:50 - 00000646 _____ C:\Windows\Tasks\Scheduled scanning task.job
2013-09-06 09:23 - 2012-09-07 11:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-06 09:23 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-05 21:54 - 2012-08-03 01:02 - 00753596 _____ C:\Windows\system32\perfh007.dat
2013-09-05 21:54 - 2012-08-03 01:02 - 00155998 _____ C:\Windows\system32\perfc007.dat
2013-09-05 21:54 - 2012-07-26 09:28 - 01746930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 20:26 - 2012-12-02 17:35 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E165C355-7056-450E-828D-23AFC16DD271}
2013-09-05 16:16 - 2013-08-06 09:31 - 00047436 _____ C:\Windows\PFRO.log
2013-09-05 12:06 - 2013-09-05 12:06 - 02347384 _____ (ESET) C:\Users\Renate\Downloads\esetsmartinstaller_enu.exe
2013-09-04 21:43 - 2013-09-04 21:11 - 1925187635 _____ C:\Users\Renate\Downloads\veloeurope.7z
2013-09-04 21:10 - 2013-09-04 21:09 - 377588037 _____ C:\Users\Renate\Downloads\veloeurope.exe
2013-09-04 19:38 - 2013-09-04 19:38 - 00001076 _____ C:\Users\Renate\Desktop\JRT.txt
2013-09-04 19:36 - 2012-12-02 14:40 - 00000000 ____D C:\Users\Renate\AppData\Local\CrashDumps
2013-09-04 19:35 - 2013-09-04 19:35 - 00000000 ____D C:\Windows\ERUNT
2013-09-04 19:31 - 2013-09-04 19:31 - 01028757 _____ (Thisisu) C:\Users\Renate\Downloads\JRT.exe
2013-09-04 19:08 - 2012-07-26 07:26 - 01048576 ___SH C:\Windows\system32\config\BBI
2013-09-04 19:07 - 2013-09-04 19:05 - 00000000 ____D C:\AdwCleaner
2013-09-04 19:07 - 2013-07-24 11:29 - 00000000 ____D C:\Windows\System32\Tasks\Browser Updater
2013-09-04 19:07 - 2012-11-29 21:13 - 00000000 ___RD C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-04 19:03 - 2013-09-04 19:03 - 01037222 _____ C:\Users\Renate\Downloads\adwcleaner.exe
2013-09-04 19:01 - 2013-09-04 19:01 - 00001128 _____ C:\Users\Renate\Desktop\Continue Zip Opener Installation.lnk
2013-09-04 18:40 - 2013-09-04 18:40 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-04 18:38 - 2013-09-04 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-04 18:37 - 2013-09-04 18:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Renate\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-03 15:14 - 2013-09-03 15:14 - 00000000 ____D C:\Users\Renate\AppData\Local\Macromedia
2013-09-03 15:13 - 2013-09-03 15:13 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-03 15:13 - 2012-11-29 23:45 - 00000000 ____D C:\Users\Renate\AppData\Local\Adobe
2013-09-03 15:13 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\McAfee
2013-09-03 14:36 - 2013-09-03 14:35 - 00086496 _____ C:\Users\Renate\Downloads\Addition.txt
2013-09-03 14:33 - 2013-09-03 14:33 - 00000000 ____D C:\FRST
2013-09-03 12:26 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Deepnet Explorer
2013-09-03 12:08 - 2013-08-11 18:27 - 00000000 ____D C:\Program Files (x86)\Deepnet Explorer
2013-09-03 11:41 - 2013-09-03 11:41 - 02434048 _____ C:\Users\Renate\Downloads\msxml(1).msi
2013-09-03 11:40 - 2013-09-03 11:40 - 02434048 _____ C:\Users\Renate\Downloads\msxml.msi
2013-09-03 11:29 - 2013-01-13 17:32 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-03 11:26 - 2013-09-03 11:26 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64 (1).msu
2013-08-30 19:05 - 2013-08-30 19:05 - 00083843 _____ C:\Users\Renate\Downloads\20130830-4zqc9MNQzvUUiEMtoRMw.zip
2013-08-30 18:57 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViStart
2013-08-30 17:00 - 2013-08-30 17:00 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox Setup 23.0.1.exe
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Users\Renate\AppData\Local\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-08-30 16:54 - 2013-08-30 16:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 16:54 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 16:53 - 2013-08-30 16:53 - 22240760 _____ (Mozilla) C:\Users\Renate\Downloads\Firefox_Setup_23.0.1.exe
2013-08-30 16:36 - 2013-08-30 16:36 - 02828552 _____ (AVAST Software) C:\Users\Renate\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-29 09:41 - 2013-08-29 09:41 - 18618493 _____ C:\Users\Renate\Downloads\Windows8-RT-KB2857645-x64.msu
2013-08-26 15:06 - 2013-08-26 15:06 - 01110476 _____ C:\Users\Renate\Downloads\7z920 (1).exe
2013-08-26 11:45 - 2013-08-05 18:51 - 00000000 ____D C:\Users\Renate\AppData\Local\WinZip
2013-08-26 09:44 - 2012-11-30 10:25 - 00000000 ____D C:\Program Files (x86)\Garmin
2013-08-22 12:51 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-08-21 17:30 - 2013-01-02 19:01 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys
2013-08-21 17:26 - 2013-08-21 17:26 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:26 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-21 17:25 - 2013-08-21 17:25 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:21 - 2013-08-05 12:16 - 07684479 _____ C:\Windows\FSISU.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01779944 _____ C:\Windows\FSSFM.log
2013-08-21 17:21 - 2013-08-05 12:16 - 01540018 _____ C:\Windows\FSSETUP.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00294760 _____ C:\Windows\FSDEPH.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00272420 _____ C:\Windows\FSPROD.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00229964 _____ C:\Windows\RunSetup.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00142032 _____ C:\Windows\FSAVINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00012390 _____ C:\Windows\FSAVCSIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00008044 _____ C:\Windows\FSGKIAIN.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00003650 _____ C:\Windows\FSLDIN.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00003415 _____ C:\Windows\fsavunin.log
2013-08-21 17:21 - 2013-08-05 12:16 - 00002380 _____ C:\Windows\DAASINST.LOG
2013-08-21 17:21 - 2013-08-05 12:16 - 00001314 _____ C:\Windows\fsav_db_setup.log
2013-08-21 17:21 - 2013-01-02 18:55 - 00019829 _____ C:\Windows\prodsett_copy.ini
2013-08-21 17:20 - 2013-08-05 12:16 - 00038536 _____ C:\Windows\fspplugin.log
2013-08-18 17:31 - 2013-08-18 17:31 - 00235522 _____ C:\Users\Renate\Downloads\Tour_107342.gpx
2013-08-18 15:28 - 2013-08-18 15:28 - 01113812 _____ C:\Users\Renate\Downloads\Tour_34385.gpx
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-16 19:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-16 09:52 - 2013-08-16 09:49 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 09:49 - 2012-12-12 22:34 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Users\Renate\AppData\Roaming\ViStart
2013-08-16 09:30 - 2013-01-06 15:37 - 00000000 ____D C:\Program Files (x86)\ViUpdater
2013-08-15 18:06 - 2013-04-18 15:50 - 00116224 ___SH C:\Users\Renate\Desktop\Thumbs.db
2013-08-15 18:04 - 2013-08-15 18:04 - 00000359 _____ C:\Users\Renate\Papierkorb - Verknüpfung.lnk
2013-08-15 18:04 - 2012-11-29 21:10 - 00000000 ____D C:\Users\Renate
2013-08-13 12:32 - 2013-04-04 18:46 - 00000000 ____D C:\Users\Renate\AppData\Roaming\elsterformular
2013-08-13 12:31 - 2013-04-04 18:45 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2013-08-13 12:28 - 2013-08-13 12:28 - 135559568 _____ (Landesfinanzdirektion Thüringen) C:\Users\Renate\Downloads\ElsterFormular-14.3.20130522k.exe
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\Documents\Steuerfälle
2013-08-13 12:17 - 2013-08-13 12:17 - 00000000 ____D C:\Users\Renate\AppData\Local\AAV
2013-08-13 12:12 - 2013-08-13 12:04 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-08-13 12:12 - 2013-08-13 12:02 - 00000000 ____D C:\ProgramData\AAV
2013-08-13 08:38 - 2013-07-24 11:29 - 00032328 _____ C:\Windows\Launcher.exe
2013-08-11 18:35 - 2013-08-11 18:35 - 00000000 ____D C:\Users\Renate\AppData\Local\DoNotTrackPlus
2013-08-11 18:28 - 2013-08-11 18:28 - 00001058 _____ C:\Users\UpdatusUser\Desktop\Deepnet Explorer.lnk
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\DAPE
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Users\Renate\AppData\Roaming\Check Point Software Technologies LTD
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\ProgramData\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-08-11 18:28 - 2013-08-11 18:28 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-08-07 19:31 - 2012-09-07 11:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-07 19:02 - 2013-08-07 19:02 - 00170205 _____ C:\Users\Renate\Downloads\20130807-AJRvNdsqhj0n8LyHqIhZ.zip
2013-08-07 18:50 - 2013-08-07 18:50 - 00152231 _____ C:\Users\Renate\Downloads\20130807-hQUooLuyXk36OrvEe8en.zip
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\Users\Renate\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Renate\AppData\Local\Temp\Quarantine.exe
C:\Users\Renate\AppData\Local\Temp\tbuE1F9.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe
C:\Users\Renate\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe
C:\Users\Renate\AppData\Local\Temp\nsf2BA.tmp\ShellLink.dll
C:\Users\Renate\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\UpdatusUser\AppData\Local\Temp\nsgE511.tmp\System.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-30 10:24
==================== End Of Log ============================
--- --- --- --- --- --- |
|
07.09.2013, 07:27
| #9 | ||
| /// the machine /// TB-Ausbilder | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschenZitat:
Zitat:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ShortcutTarget: Dropbox.lnk -> C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled ()
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.09.2013, 08:59
| #10 |
| | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Hallo Schrauber, hier das Fixlog.txt. Mit delfix wurde offensichtlich alles gelöscht. Ich möchte mich bei Dir noch einmal ganz herzlich für die tolle Unterstützung bedanken. Ich werde mich zukünftig noch besser an Deine Empfehlungen halten und hoffe so, Dich nicht mehr belästigen zu müssen. Im Moment habe ich keine weiteren Fragen, Du kannst den Thread gerne löschen. Noch einmal herzlichen Dank, alles Gute für Dich und viel Erfolg beim Studium - Informatik nehme ich an? Viele Grüße Renate47 Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-09-2013
Ran by Renate at 2013-09-07 09:43:57 Run:1
Running from C:\Users\Renate\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ShortcutTarget: Dropbox.lnk -> C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled ()
*****************
C:\Users\Renate\AppData\Roaming\Dropbox\bin\Dropbox.exe => Moved successfully.
C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~Disabled => Moved successfully.
==== End of Fixlog ====
|
|
07.09.2013, 12:39
| #11 |
| /// the machine /// TB-Ausbilder | AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen Informatik, genau Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu AddOn Home Tab im IE lässt sich nicht deaktivieren oder löschen |
| addon, adware.bundler, andere, anderen, deaktivieren, einfach, gemeldet, hijack.searchpage, home, home tab, installier, installiert, löschen, problem, pup.optional.hometab.a, pup.optional.iminent, pup.optional.iminent.a, pup.optional.softonic, pup.optional.umbrella.a, tab, unbemerkt, würde |
Linear-Darstellung
