Win32/addlyris

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2013
Ran by *** (administrator) on ***-LAPTOP on 07-09-2013 13:28:37
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BBSvc.exe
() C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
() C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
() C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Spotify Ltd) C:\Users\***\AppData\Roaming\Spotify\spotify.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Visicom Media Inc. (Powered by Panda Security)) C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_94_ActiveX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11725928 2010-12-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-12-10] (Realtek Semiconductor)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [860040 2011-01-06] (Acer Incorporated)
HKLM\...\Run: [PLFSetL] - C:\Windows\\PLFSetL.exe [94208 2007-07-05] (sonix)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [EA Core] - "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent [x]
HKCU\...\Run: [Spotify] - C:\Users\***\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-08] (Spotify Ltd)
HKCU\...\Run: [NTRedirect] - C:\Users\***\AppData\Roaming\BabSolution\Shared\enhancedNT.dll [187888 2013-08-22] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340336 2010-09-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-09-18] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296768 2010-11-12] (NTI Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1078352 2011-02-24] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer\clear.fi\ [0 ] ()
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2010-12-09] (CyberLink Corp.)
HKLM-x32\...\Run: [Anti-phishing Domain Advisor] - C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe [206504 2011-12-22] (Visicom Media Inc. (Powered by Panda Security))
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2010-12-12] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll  [2699216 2013-08-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?babsrc=HP_ss_sps&mntrId=1E3818F46A843FE9&affID=121563&tt=070713_91114&tsp=4936
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?babsrc=HP_ss_sps&mntrId=1E3818F46A843FE9&affID=121563&tt=070713_91114&tsp=4936
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_sps&mntrId=1E3818F46A843FE9&affID=121563&tt=070713_91114&tsp=4936
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_sps&mntrId=1E3818F46A843FE9&affID=121563&tt=070713_91114&tsp=4936
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://blekko.com/?source=c3348dd4&tbp=rbox&q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {F2E85917-0662-4E37-84AD-7C8A85E6D612} URL = hxxp://www.mysearchresults.com/search?c=2653&t=01&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: LyricXeeker - {1a11f87e-70b8-4f0b-8f08-90a8c6ff8c18} - C:\Program Files (x86)\LyriXeeker\130.dll (LyricXeeker)
BHO-x32: Updater For Spam Free Search Bar - {20a0be68-8fd9-4539-8712-ce3d1c1fdfc6} - C:\Program Files (x86)\blekkotb\auxi\blekkoAu.dll (Visicom Media)
BHO-x32: Spam Free Search Bar - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll ()
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (Search Results LLC.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DealPly Shopping - {9cf699ca-2174-4ed8-bec1-ba82095edce0} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM-x32 - Spam Free Search Bar - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll ()
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\blekkotb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] C:\Program Files (x86)\LyriXeeker\130.xpi
FF Extension: No Name - C:\Program Files (x86)\LyriXeeker\130.xpi

Chrome: 
=======
CHR Extension: (Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DealPly  Shopping) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi\3.5.0.0_0
CHR Extension: (Delta Toolbar) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: () - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\epojlgbehpaeekopencdagbdamnkppci\1.128
CHR Extension: () - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\1.1.19
CHR Extension: (Chrome In-App Payments service) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\***\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\130.crx
CHR HKLM-x32\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files (x86)\DefaultTab\DefaultTab.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838480 2013-08-13] ()
S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd)
R2 DefaultTabUpdate; C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-07-11] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2010-11-12] (NTI Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-27] (Avira Operations GmbH & Co. KG)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-07 13:28 - 2013-09-07 13:28 - 00000000 ____D C:\FRST
2013-09-07 13:28 - 2013-09-07 13:28 - 00000000 _____ C:\Users\***\defogger_reenable
2013-09-07 13:26 - 2013-09-07 13:26 - 00377856 _____ C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-09-07 13:25 - 2013-09-07 13:25 - 01948604 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-07 13:24 - 2013-09-07 13:24 - 00050477 _____ C:\Users\***\Desktop\Defogger.exe
2013-09-07 11:36 - 2013-09-07 13:13 - 00000112 _____ C:\Windows\setupact.log
2013-09-07 11:36 - 2013-09-07 11:36 - 00000000 _____ C:\Windows\setuperr.log
2013-09-07 11:35 - 2013-09-07 11:35 - 00000328 _____ C:\Windows\PFRO.log
2013-09-07 09:54 - 2013-09-07 09:54 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-09-07 09:54 - 2013-09-07 09:54 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-09-07 09:54 - 2013-09-07 09:54 - 00000000 ____D C:\Program Files\CCleaner
2013-09-06 20:21 - 2013-09-07 09:18 - 96496803 _____ C:\Windows\SysWOW64\恊—
2013-09-03 11:22 - 2013-09-03 17:22 - 95638383 _____ C:\Windows\SysWOW64\쭥縯™
2013-08-27 21:07 - 2013-08-27 21:07 - 00000000 ____D C:\Users\***\AppData\Roaming\Avira
2013-08-27 21:02 - 2013-09-02 15:01 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-27 21:01 - 2013-08-27 21:01 - 00001998 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-27 21:00 - 2013-09-02 15:01 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-27 21:00 - 2013-09-02 15:01 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-27 21:00 - 2013-08-27 20:55 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-27 20:59 - 2013-08-27 21:01 - 00000000 ____D C:\ProgramData\Avira
2013-08-27 20:59 - 2013-08-27 20:59 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-26 15:18 - 2013-08-26 15:18 - 00000000 ____D C:\Users\***\AppData\Local\avgchrome
2013-08-26 15:18 - 2013-08-26 15:18 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-24 15:56 - 2013-09-07 09:30 - 00000071 _____ C:\Users\***\AppData\Roaming\WB.CFG
2013-08-24 15:56 - 2013-09-07 09:30 - 00000005 _____ C:\Users\***\AppData\Roaming\WBPU-TTL.DAT
2013-08-24 14:56 - 2013-09-07 13:13 - 00000900 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-08-24 14:56 - 2013-09-07 12:07 - 00000904 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-08-24 14:56 - 2013-08-24 14:56 - 00003900 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-08-24 14:56 - 2013-08-24 14:56 - 00003648 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-08-24 14:56 - 2013-08-24 14:56 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-24 14:55 - 2013-09-07 13:13 - 00000388 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-08-24 14:55 - 2013-09-07 12:07 - 00000286 _____ C:\Windows\Tasks\DSite.job
2013-08-24 14:55 - 2013-09-07 11:55 - 00000290 _____ C:\Windows\Tasks\Dealply.job
2013-08-24 14:55 - 2013-08-26 15:18 - 00003036 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-24 14:55 - 2013-08-24 14:56 - 00003234 _____ C:\Windows\System32\Tasks\DSite
2013-08-24 14:55 - 2013-08-24 14:55 - 00003366 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-08-24 14:55 - 2013-08-24 14:55 - 00003238 _____ C:\Windows\System32\Tasks\Dealply
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\DSite
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\Dealply
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Local\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-08-24 14:54 - 2013-08-24 14:54 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe
2013-08-18 16:05 - 2013-08-18 16:05 - 00000000 ____D C:\Users\***\AppData\Local\{11725FF6-11F2-4C81-99EA-636AD4F55B21}
2013-08-16 14:15 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-16 14:15 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-16 14:15 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-16 14:15 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-16 14:15 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-16 14:15 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-16 14:15 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-16 14:15 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-16 14:15 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-16 14:15 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-16 14:15 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-16 14:15 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-16 14:15 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 14:53 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 14:53 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 14:53 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 14:53 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 14:53 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 14:53 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 14:53 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 14:53 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 14:53 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 14:53 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 14:53 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 14:53 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 14:53 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 14:53 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 14:53 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 14:53 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 14:53 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 14:53 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 14:53 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 14:53 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 14:53 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 14:53 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 14:53 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 14:53 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 14:53 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 14:53 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 14:53 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-07 13:29 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-07 13:29 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-07 13:28 - 2013-09-07 13:28 - 00000472 _____ C:\Users\***\Desktop\defogger_disable.log
2013-09-07 13:28 - 2013-09-07 13:28 - 00000000 ____D C:\FRST
2013-09-07 13:28 - 2013-09-07 13:28 - 00000000 _____ C:\Users\***\defogger_reenable
2013-09-07 13:28 - 2011-05-07 13:33 - 00000000 ____D C:\Users\***
2013-09-07 13:26 - 2013-09-07 13:26 - 00377856 _____ C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-09-07 13:25 - 2013-09-07 13:25 - 01948604 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-09-07 13:24 - 2013-09-07 13:24 - 00050477 _____ C:\Users\***\Desktop\Defogger.exe
2013-09-07 13:17 - 2011-04-15 00:05 - 01153322 _____ C:\Windows\WindowsUpdate.log
2013-09-07 13:14 - 2013-03-24 21:38 - 00000000 ____D C:\Users\***\AppData\Roaming\Spotify
2013-09-07 13:13 - 2013-09-07 11:36 - 00000112 _____ C:\Windows\setupact.log
2013-09-07 13:13 - 2013-08-24 14:56 - 00000900 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-09-07 13:13 - 2013-08-24 14:55 - 00000388 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-09-07 13:13 - 2013-01-18 18:32 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-07 13:13 - 2012-01-03 16:57 - 00000000 ____D C:\ProgramData\Anti-phishing Domain Advisor
2013-09-07 13:13 - 2011-04-15 00:23 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-07 13:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-07 12:07 - 2013-08-24 14:56 - 00000904 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-09-07 12:07 - 2013-08-24 14:55 - 00000286 _____ C:\Windows\Tasks\DSite.job
2013-09-07 12:07 - 2013-01-08 19:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-07 11:55 - 2013-08-24 14:55 - 00000290 _____ C:\Windows\Tasks\Dealply.job
2013-09-07 11:48 - 2013-01-18 18:32 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-07 11:36 - 2013-09-07 11:36 - 00000000 _____ C:\Windows\setuperr.log
2013-09-07 11:35 - 2013-09-07 11:35 - 00000328 _____ C:\Windows\PFRO.log
2013-09-07 09:57 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-09-07 09:54 - 2013-09-07 09:54 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-09-07 09:54 - 2013-09-07 09:54 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-09-07 09:54 - 2013-09-07 09:54 - 00000000 ____D C:\Program Files\CCleaner
2013-09-07 09:30 - 2013-08-24 15:56 - 00000071 _____ C:\Users\***\AppData\Roaming\WB.CFG
2013-09-07 09:30 - 2013-08-24 15:56 - 00000005 _____ C:\Users\***\AppData\Roaming\WBPU-TTL.DAT
2013-09-07 09:18 - 2013-09-06 20:21 - 96496803 _____ C:\Windows\SysWOW64\恊—
2013-09-07 00:00 - 2013-05-24 16:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-07 00:00 - 2011-05-07 16:53 - 00000000 ____D C:\Users\***\AppData\Roaming\Mozilla
2013-09-06 15:08 - 2013-07-11 15:38 - 00000000 ____D C:\ProgramData\VirtualWifiRouter
2013-09-03 21:23 - 2013-07-05 01:45 - 00000516 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-03 21:23 - 2013-03-24 21:39 - 00000000 ____D C:\Users\***\AppData\Local\Spotify
2013-09-03 17:22 - 2013-09-03 11:22 - 95638383 _____ C:\Windows\SysWOW64\쭥縯™
2013-09-02 15:01 - 2013-08-27 21:02 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-02 15:01 - 2013-08-27 21:00 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-02 15:01 - 2013-08-27 21:00 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-31 10:49 - 2013-07-11 15:38 - 00008213 _____ C:\Users\***\Downloads\.2013-08-30
2013-08-28 20:35 - 2013-07-11 15:32 - 00000000 ____D C:\Program Files (x86)\DefaultTab
2013-08-28 11:22 - 2013-07-11 15:38 - 00005155 _____ C:\Users\***\Downloads\.2013-08-27
2013-08-27 21:07 - 2013-08-27 21:07 - 00000000 ____D C:\Users\***\AppData\Roaming\Avira
2013-08-27 21:01 - 2013-08-27 21:01 - 00001998 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-27 21:01 - 2013-08-27 20:59 - 00000000 ____D C:\ProgramData\Avira
2013-08-27 20:59 - 2013-08-27 20:59 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-27 20:55 - 2013-08-27 21:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-26 15:18 - 2013-08-26 15:18 - 00000000 ____D C:\Users\***\AppData\Local\avgchrome
2013-08-26 15:18 - 2013-08-26 15:18 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-26 15:18 - 2013-08-24 14:55 - 00003036 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-24 15:01 - 2013-07-08 00:12 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-24 14:56 - 2013-08-24 14:56 - 00003900 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-08-24 14:56 - 2013-08-24 14:56 - 00003648 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-08-24 14:56 - 2013-08-24 14:56 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-24 14:56 - 2013-08-24 14:55 - 00003234 _____ C:\Windows\System32\Tasks\DSite
2013-08-24 14:56 - 2013-07-08 00:12 - 00003396 _____ C:\Windows\System32\Tasks\EPUpdater
2013-08-24 14:55 - 2013-08-24 14:55 - 00003366 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-08-24 14:55 - 2013-08-24 14:55 - 00003238 _____ C:\Windows\System32\Tasks\Dealply
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\DSite
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Roaming\Dealply
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Users\***\AppData\Local\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-08-24 14:55 - 2013-08-24 14:55 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-08-24 14:54 - 2013-08-24 14:54 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe
2013-08-22 19:06 - 2013-01-08 19:00 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-22 19:06 - 2013-01-08 19:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-22 19:06 - 2011-12-13 19:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-18 16:05 - 2013-08-18 16:05 - 00000000 ____D C:\Users\***\AppData\Local\{11725FF6-11F2-4C81-99EA-636AD4F55B21}
2013-08-18 14:12 - 2011-12-30 16:15 - 00000000 ____D C:\Users\***\dwhelper
2013-08-16 14:12 - 2011-04-15 09:56 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-08-16 14:12 - 2011-04-15 09:56 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-08-16 14:12 - 2009-07-14 07:13 - 01522286 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-14 10:27 - 2013-07-11 15:38 - 00003765 _____ C:\Users\***\Downloads\.2013-08-13
2013-08-13 19:15 - 2013-07-11 15:32 - 00000306 __RSH C:\Users\***\ntuser.pol

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-06 19:17

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-09-2013
Ran by *** at 2013-09-07 13:30:58
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Acer Backup Manager (x32 Version: 3.0.0.69)
Acer Crystal Eye Webcam (x32 Version: 1.0.1820)
Acer Crystal Eye Webcam Video Class Camera  (x32 Version: 5.8.31.500-1.0)
Acer ePower Management (x32 Version: 6.00.3002)
Acer eRecovery Management (x32 Version: 5.00.3002)
Acer GameZone Console (x32 Version: 6.1.0.9)
Acer Registration (x32 Version: 1.03.3003)
Acer ScreenSaver (x32 Version: 1.1.1130.2010)
Acer Updater (x32 Version: 1.02.3001)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 1.5.0.7220)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader 9.1 MUI (x32 Version: 9.1.0)
Airport Mania First Flight (x32)
Amazonia (x32)
Angry Birds (x32 Version: 2.0.2)
Anti-phishing Domain Advisor (x32 Version: 1.0.0.0)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Backup Manager V3 (x32 Version: 3.0.0.69)
Bing Bar (x32 Version: 7.2.233.0)
Broadcom Card Reader Driver Installer (Version: 14.6.1.2)
Broadcom Gigabit NetLink Controller (Version: 14.6.1.2)
BrowserDefender (x32)
Cake Mania (x32)
clear.fi (x32 Version: 1.0.1229.00)
clear.fi (x32 Version: 9.0.7209)
clear.fi Client (x32 Version: 1.00.3008)
D3DX10 (x32 Version: 15.4.2368.0902)
Dealply (HKCU)
DealPly (remove only) (x32 Version: 4.8.7.3)
DefaultTab (x32 Version: 2.2.8.0)
DefaultTab Chrome (x32 Version: 1.1.25)
Delta Chrome Toolbar (x32)
Delta toolbar   (x32 Version: 1.8.24.6)
Die Sims™ 3 (x32 Version: 1.55.4)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die Sims™ 3 Late Night (x32 Version: 6.0.81)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)
Dream Day First Home (x32)
eaner (Version: 4.05)
eBay Worldwide (x32 Version: 2.1.0901)
eSobi v2 (x32 Version: 2.0.4.000274)
Farm Frenzy 2 (x32)
FormatFactory 2.60 (x32 Version: 2.60)
Galapago (x32)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 29.0.1547.66)
Google Update Helper (x32 Version: 1.3.21.153)
Identity Card (x32 Version: 1.00.3003)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2291)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Launch Manager (x32 Version: 5.1.3)
LyricXeeker (x32)
MediaEspresso (x32 Version: 1.0.1210_33255)
Merriam Websters Spell Jam (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2000 Professional (x32 Version: 9.00.2816)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MyWinLocker (Version: 4.0.14.11)
MyWinLocker 4 (x32 Version: 4.0.14.11)
MyWinLocker Suite (x32 Version: 4.0.14.11)
Norton Online Backup (x32 Version: 2.1.17869)
NTI Media Maker 9 (x32 Version: 9.0.2.8939)
NVIDIA Grafiktreiber 266.19 (Version: 266.19)
NVIDIA Install Application (Version: 2.265.36.0)
NVIDIA Optimus 1.0.11 (Version: 1.0.11)
NVIDIA Systemsteuerung 266.19 (Version: 266.19)
NVIDIA Update Components (Version: 1.0.11)
Origin (x32 Version: 8.2.2.2413)
PhotoScape (x32)
Poker Pop (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6276)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0)
Shredder (Version: 2.0.8.7)
Shredder (x32 Version: 2.0.8.7)
Spam Free Search Bar (x32 Version: 1.0.0.8)
Spin & Win (x32)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Synaptics Pointing Device Driver (Version: 15.1.6.0)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Zip Opener (HKCU)
Welcome Center (x32 Version: 1.02.3007)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

22-08-2013 16:42:43 Windows Update
27-08-2013 19:08:12 Windows Update
03-09-2013 15:06:11 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0695DC05-16FC-4F29-B5E1-58C6289FC7DE} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd)
Task: {3684E03F-F281-4777-B8E0-27A0A27251FB} - System32\Tasks\EPUpdater => C:\Users\***\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] ()
Task: {3FC9FA56-55B0-4567-ADBD-6C70D7C4B71D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {45B7F207-73A6-462F-B341-7E1DCA56A8FC} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd)
Task: {6E406299-F929-49BF-86F4-097B35B83A8F} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-26] ()
Task: {79D3DBB8-B42D-4061-9BD0-410B4A0E1A2C} - System32\Tasks\DealPlyUpdate => C:\Program
Task: {8DE10E61-651C-4EF1-8589-D365C3D64F37} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2010-12-29] (CyberLink Corp.)
Task: {93E833CC-D2BC-4A1E-BA2F-904373DFC1DB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-22] (Adobe Systems Incorporated)
Task: {9B256348-C9F1-4246-899E-7726CD1243EE} - System32\Tasks\Dealply => C:\Users\***\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {B4CE3690-8B60-4E75-974D-2AD0BC654555} - System32\Tasks\DSite => C:\Users\***\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-08-24] ()
Task: {B991B704-DC5C-4C31-A52B-AE30904C4DF2} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BFDA958A-7921-405B-BC60-57F8F8942CA4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-18] (Google Inc.)
Task: {D665E912-E0C4-44C5-B951-071E04907E7C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {F63DE1FB-F4CF-42FC-B24A-F8B661DFB51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-18] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\***\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\***\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe

==================== Loaded Modules (whitelisted) =============

2011-04-15 00:19 - 2010-12-12 15:58 - 00226920 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2011-04-15 00:35 - 2011-01-06 15:32 - 00270720 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\SysHook.dll
2011-02-22 15:11 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2011-02-22 15:11 - 2010-12-22 05:28 - 02828392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2011-03-03 13:52 - 2011-01-27 18:25 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2011-03-03 13:52 - 2011-01-27 18:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-02-22 14:33 - 2010-07-29 15:26 - 00400168 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2011-02-22 14:33 - 2010-07-29 15:26 - 00215336 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2011-04-15 00:35 - 2011-01-06 15:32 - 00218000 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\BrightnessControl.dll
2011-04-15 00:35 - 2011-01-06 15:32 - 00216984 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\PowerSettingControl.dll
2011-04-15 00:35 - 2011-01-06 15:32 - 00216976 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\NetAdapterControl.dll
2011-04-15 00:35 - 2011-01-06 15:32 - 00215944 _____ (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\CommonControl.dll
2011-04-15 00:19 - 2010-12-12 15:58 - 02197608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2011-03-03 13:49 - 2011-02-24 06:54 - 00766544 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2013-07-24 19:58 - 2013-07-24 19:58 - 00506488 _____ (Search Results LLC.) C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap64.dll
2013-08-22 18:32 - 2013-08-22 18:32 - 00529288 _____ (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_94_ActiveX.dll
2013-08-14 14:53 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-01-08 20:58 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2013-01-08 20:58 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2013-06-15 13:05 - 2010-11-20 14:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2013-06-15 13:04 - 2010-11-20 14:08 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-08 20:59 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2012-02-15 22:21 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2013-06-15 13:05 - 2010-11-20 14:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-08-14 14:53 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2012-07-11 16:20 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2013-07-11 15:45 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2011-06-21 19:29 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2013-08-27 21:00 - 2013-09-02 15:00 - 00055352 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cfglib.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00218168 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpipc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00109112 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpgen.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00128056 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpschd.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2013-06-15 13:06 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2013-08-27 21:00 - 2013-08-27 20:54 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-07-13 16:22 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00039480 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpgrd.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00057400 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpgui.dll
2013-06-15 13:05 - 2010-11-20 14:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2011-10-12 16:09 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00042552 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gplegacy.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00050744 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpgenrep.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00025656 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\onlcfg.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00110648 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gavidb.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00497720 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avlode.dll
2013-08-27 21:00 - 2013-08-27 20:51 - 00154112 _____ (Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\apcfile.dll
2013-08-27 21:00 - 2013-08-27 20:53 - 00257536 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\Avira\AntiVir Desktop\libcurl.dll
2013-06-15 13:05 - 2010-11-20 14:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2013-08-14 14:53 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2011-06-21 19:29 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2013-08-27 21:00 - 2013-08-27 20:53 - 00181248 _____ (Apache Software Foundation) C:\Program Files (x86)\Avira\AntiVir Desktop\libaprutil-1.dll
2013-08-27 21:00 - 2013-08-27 20:53 - 00027136 _____ (Apache Software Foundation) C:\Program Files (x86)\Avira\AntiVir Desktop\libapriconv-1.dll
2013-08-27 21:00 - 2013-08-27 20:53 - 00131584 _____ (Apache Software Foundation) C:\Program Files (x86)\Avira\AntiVir Desktop\libapr-1.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00312888 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\gpavgio.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00134200 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avesvc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00014392 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avesvcr.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00250424 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avreg.dll
2013-08-16 14:15 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL
2013-08-16 14:15 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-08-24 14:56 - 2013-08-13 16:40 - 02699216 _____ () C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll
2012-04-14 11:06 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2009-07-14 01:29 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qmgrprxy.dll
2013-08-16 14:15 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2011-06-21 19:29 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2011-07-13 16:22 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00049984 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\Pehook.DLL
2010-11-12 03:22 - 2010-11-12 03:22 - 00423744 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\ISchedule.DLL
2010-11-12 03:22 - 2010-11-12 03:22 - 00632128 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\SyncDll.DLL
2010-11-12 03:22 - 2010-11-12 03:22 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00059712 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\agent_stub.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00078656 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookDispatch.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00657216 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BookmarkDLL.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00240448 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\WinSetDLL.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2010-11-12 03:21 - 2010-11-12 03:21 - 00063808 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\VssAgent.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00332608 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IShadowS3.dll
2013-08-14 14:53 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2012-07-11 16:20 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-06-15 13:04 - 2010-11-20 14:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.DLL
2013-03-24 21:39 - 2013-07-08 00:25 - 24985600 _____ () C:\Users\***\AppData\Roaming\Spotify\Data\libcef.dll
2011-06-21 19:29 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2013-03-24 21:39 - 2013-07-08 00:25 - 09964032 _____ (The ICU Project) C:\Users\***\AppData\Roaming\Spotify\Data\icudt.dll
2009-07-14 01:53 - 2009-07-14 03:15 - 00462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2011-12-22 00:13 - 2011-12-22 00:13 - 00305832 _____ (Visicom Media Inc. (Powered by Panda Security)) C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.dll
2013-08-22 18:33 - 2013-08-22 18:33 - 16230792 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_94.ocx
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2013-06-15 13:05 - 2010-11-20 14:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\USERENV.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profapi.dll
2013-06-15 13:05 - 2010-11-20 14:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINSPOOL.DRV
2009-07-14 01:55 - 2009-07-14 03:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPR.dll
2009-07-14 01:41 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VERSION.dll
2013-06-15 13:05 - 2010-11-20 14:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINHTTP.dll
2012-01-25 22:13 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-08-24 14:56 - 2013-08-22 11:19 - 00187888 _____ () C:\Users\***\AppData\Roaming\BabSolution\Shared\enhancedNT.dll
2009-07-14 01:24 - 2009-07-14 03:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2013-07-11 15:45 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.DLL
2009-07-14 01:12 - 2009-07-14 03:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.DLL
2013-01-08 20:58 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNEL32.dll
2013-08-17 20:28 - 2013-08-17 20:28 - 00475136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\ebdb3050959d9be47d33d2c77d6cc291\IAStorUtil.ni.dll
2013-07-13 00:31 - 2013-07-13 00:31 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00062784 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\LUInterface.dll
2010-11-12 03:22 - 2010-11-12 03:22 - 00022336 _____ (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\MUI\0407\lang.dll
2010-04-27 03:33 - 2010-04-27 03:33 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
2011-03-03 13:49 - 2009-07-20 09:12 - 00137736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll
2011-03-03 13:49 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll
2011-03-03 13:49 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll
2011-03-03 13:49 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll
2011-03-03 13:49 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll
2011-03-03 13:49 - 2009-12-30 11:13 - 00326736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll
2011-03-03 13:49 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll
2011-03-03 13:49 - 2011-01-13 14:52 - 00438352 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll
2011-03-03 13:49 - 2011-02-24 06:54 - 00393808 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll
2011-03-03 13:49 - 2010-11-03 11:00 - 00092240 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll
2011-03-03 13:49 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL
2013-06-15 13:05 - 2010-11-20 14:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\user32.DLL
2011-06-21 19:29 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\shlwapi.DLL
2013-08-27 21:00 - 2013-09-02 15:01 - 00349752 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccguard.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00029240 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgrdrc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00229432 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgrdw.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00419384 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccwgrd.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00807992 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgen.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00049720 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccgenrc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00220216 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccupdate.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00028728 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccupdrc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00083000 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cclic.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00009784 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\cclicrc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00237624 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmsg.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00010296 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmsgrc.dll
2013-08-27 21:00 - 2013-09-02 15:01 - 00014392 _____ (Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\ccmainrc.dll
2013-08-16 14:15 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2011-03-03 13:49 - 2010-12-31 14:08 - 00072272 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll
2012-07-11 16:20 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SSPICLI.DLL
2013-06-15 13:04 - 2010-11-20 14:08 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll
2013-06-15 13:05 - 2010-11-20 14:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\advapi32.DLL
2011-06-21 19:29 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll
2011-12-22 23:16 - 2011-12-22 23:16 - 00086696 _____ () C:\Program Files (x86)\blekkotb\blekkoDx.dll
2012-11-16 11:16 - 2012-11-16 11:16 - 00462848 _____ (Visicom Media Inc) C:\Users\***\AppData\LocalLow\blekkotb\blekkotb.dll
2013-08-15 10:08 - 2013-08-15 10:08 - 00300952 _____ (Delta-search.com) C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
2013-08-26 02:33 - 2013-08-26 02:33 - 00145408 _____ (LyricXeeker) C:\Program Files (x86)\LyriXeeker\130.dll
2011-12-22 23:17 - 2011-12-22 23:17 - 00262312 _____ (Visicom Media) C:\Program Files (x86)\blekkotb\auxi\blekkoAu.dll
2013-07-24 19:58 - 2013-07-24 19:58 - 00449656 _____ (Search Results LLC.) C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll
2013-08-15 10:08 - 2013-08-15 10:08 - 00314264 _____ (Delta-search.com) C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll
2013-08-15 10:08 - 2013-08-15 10:08 - 00331160 _____ (Delta-search.com) C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaApp.dll
2013-08-15 10:08 - 2013-08-15 10:08 - 00610200 _____ (Delta-search.com) C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaEng.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWow64\jscript.dll
2013-08-16 14:15 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2009-07-14 01:42 - 2009-07-14 03:14 - 00122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2009-07-14 01:42 - 2009-07-14 03:16 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ScrRun.dll
2013-07-13 12:46 - 2013-07-13 12:46 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dxtrans.dll
2009-07-14 02:14 - 2009-07-14 03:14 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ATL.DLL
2009-07-14 01:28 - 2009-07-14 03:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
2009-07-14 01:27 - 2009-07-14 03:15 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DDRAW.dll
2009-07-14 01:25 - 2009-07-14 03:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DCIMAN32.dll
2013-07-13 12:46 - 2013-07-13 12:46 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dxtmsft.dll
2009-07-14 01:27 - 2009-07-14 03:16 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uiautomationcore.dll
2013-08-17 20:28 - 2013-08-17 20:28 - 00019968 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\898df551d58233f57a678406a6eb470d\IAStorDataMgrSvc.ni.exe
2013-08-17 20:28 - 2013-08-17 20:28 - 00219136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\6293ff10d662de11fd55cca92f9acd45\IAStorDataMgr.ni.dll
2013-08-17 20:29 - 2013-08-17 20:29 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\cd9a4b4dbc1a4b564ebed696e18cadb6\IsdiInterop.ni.dll
2011-02-22 15:10 - 2010-09-14 04:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-04-15 00:18 - 2011-02-01 22:57 - 01892352 _____ (Apache Software Foundation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\Temp:798A3728
AlternateDataStreams: C:\ProgramData\Temp:93EB7685
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57
AlternateDataStreams: C:\ProgramData\Temp:E3C56885


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/07/2013 01:26:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/07/2013 11:36:20 AM) (Source: ESENT) (User: )
Description: taskhost (1580) WebCacheLocal: Fehler -1811 beim Öffnen von Protokolldatei C:\Users\***\AppData\Local\Microsoft\Windows\WebCache\V0100027.log.

Error: (09/07/2013 09:33:29 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/07/2013 01:03:21 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (09/05/2013 06:52:22 PM) (Source: Application Hang) (User: )
Description: Programm spotify.exe, Version 0.9.1.57 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: bfc

Startzeit: 01cea8dae8f35418

Endzeit: 60000

Anwendungspfad: C:\Users\***\AppData\Roaming\Spotify\spotify.exe

Berichts-ID: 5c5aec71-164b-11e3-83b3-b870f46f922a

Error: (09/05/2013 05:36:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: visicom_antiphishing.exe, Version: 1.0.1.31, Zeitstempel: 0x4ef25240
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0xfe0
Startzeit der fehlerhaften Anwendung: 0xvisicom_antiphishing.exe0
Pfad der fehlerhaften Anwendung: visicom_antiphishing.exe1
Pfad des fehlerhaften Moduls: visicom_antiphishing.exe2
Berichtskennung: visicom_antiphishing.exe3

Error: (09/05/2013 05:36:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PmmUpdate.exe, Version: 1.1.36.0, Zeitstempel: 0x4c932097
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0056c7db
ID des fehlerhaften Prozesses: 0xf64
Startzeit der fehlerhaften Anwendung: 0xPmmUpdate.exe0
Pfad der fehlerhaften Anwendung: PmmUpdate.exe1
Pfad des fehlerhaften Moduls: PmmUpdate.exe2
Berichtskennung: PmmUpdate.exe3

Error: (09/01/2013 09:06:01 PM) (Source: Application Virtualization Client) (User: )
Description: Der Application Virtualization-Kerndienst konnte keinen Kontakt mit dem Dienststeuerungsverteiler aufnehmen.

Error: (09/01/2013 01:55:29 PM) (Source: Application Hang) (User: )
Description: Programm spotify.exe, Version 0.9.1.57 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cd0

Startzeit: 01cea64ce01e64e1

Endzeit: 60000

Anwendungspfad: C:\Users\***\AppData\Roaming\Spotify\spotify.exe

Berichts-ID: 385882a4-12fd-11e3-831a-b870f46f922a

Error: (08/30/2013 06:12:50 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.


System errors:
=============
Error: (09/07/2013 01:13:09 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎07.‎09.‎2013 um 12:17:58 unerwartet heruntergefahren.

Error: (09/07/2013 00:08:18 PM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 00:07:58 PM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 00:07:38 PM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 11:36:05 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎07.‎09.‎2013 um 11:34:16 unerwartet heruntergefahren.

Error: (09/07/2013 11:34:03 AM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 11:33:43 AM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 11:33:23 AM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.

Error: (09/07/2013 11:33:02 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (09/07/2013 10:45:31 AM) (Source: bScsiSDa) (User: )
Description: Das Gerät \Device\Scsi\bScsiSDa1 ist für den Zugriff noch nicht bereit.


Microsoft Office Sessions:
=========================
Error: (09/07/2013 01:26:38 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\***\Downloads\SoftonicDownloader_fuer_photoscape.exe

Error: (09/07/2013 11:36:20 AM) (Source: ESENT)(User: )
Description: taskhost1580WebCacheLocal: C:\Users\***\AppData\Local\Microsoft\Windows\WebCache\V0100027.log-1811

Error: (09/07/2013 09:33:29 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\***\Downloads\SoftonicDownloader_fuer_photoscape.exe

Error: (09/07/2013 01:03:21 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (09/05/2013 06:52:22 PM) (Source: Application Hang)(User: )
Description: spotify.exe0.9.1.57bfc01cea8dae8f3541860000C:\Users\***\AppData\Roaming\Spotify\spotify.exe5c5aec71-164b-11e3-83b3-b870f46f922a

Error: (09/05/2013 05:36:03 PM) (Source: Application Error)(User: )
Description: visicom_antiphishing.exe1.0.1.314ef25240ole32.dll6.1.7601.175144ce7b96fc000000500039342fe001cea8daf50d0cf0C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exeC:\Windows\syswow64\ole32.dlldf1351d5-1640-11e3-83b3-b870f46f922a

Error: (09/05/2013 05:36:01 PM) (Source: Application Error)(User: )
Description: PmmUpdate.exe1.1.36.04c932097unknown0.0.0.000000000c00000050056c7dbf6401cea8daf417df33C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exeunknownddcdd4c1-1640-11e3-83b3-b870f46f922a

Error: (09/01/2013 09:06:01 PM) (Source: Application Virtualization Client)(User: )
Description: 

Error: (09/01/2013 01:55:29 PM) (Source: Application Hang)(User: )
Description: spotify.exe0.9.1.57cd001cea64ce01e64e160000C:\Users\***\AppData\Roaming\Spotify\spotify.exe385882a4-12fd-11e3-831a-b870f46f922a

Error: (08/30/2013 06:12:50 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 5995.86 MB
Available physical RAM: 3367.15 MB
Total Pagefile: 11989.9 MB
Available Pagefile: 8977.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:581.07 GB) (Free:472.12 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 521F6DAA)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=581 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-08 01:11:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD64 rev.01.0 596,17GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\***\AppData\Local\Temp\kwlyypoc.sys


---- User code sections - GMER 2.1 ----

.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2400] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077261465 2 bytes [26, 77]
.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2400] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe[2456] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                 0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe[2456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                        0000000077261465 2 bytes [26, 77]
.text   C:\Users\***\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe[2456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                       00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2516] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077261465 2 bytes [26, 77]
.text   C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Launch Manager\dsiwmis.exe[2556] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                 0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Launch Manager\dsiwmis.exe[2556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                        0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Launch Manager\dsiwmis.exe[2556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                       00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe[2708] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                   0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe[2708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe[2708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[2840] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                              0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[2840] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                     0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[2840] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                    00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe[2524] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                     0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe[2524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                            0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe[2524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                           00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files\Acer\Acer Updater\UpdaterService.exe[2688] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                             0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files\Acer\Acer Updater\UpdaterService.exe[2688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                    0000000077261465 2 bytes [26, 77]
.text   C:\Program Files\Acer\Acer Updater\UpdaterService.exe[2688] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                   00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe[3240] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Windows\SysWOW64\rundll32.exe[3288] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                                  0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Windows\SysWOW64\rundll32.exe[3288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                         0000000077261465 2 bytes [26, 77]
.text   C:\Windows\SysWOW64\rundll32.exe[3288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                        00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe[3912] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                     0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe[3912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                            0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe[3912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                           00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe[3920] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                 0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe[3920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                        0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe[3920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                       00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[1952] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                  0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                         0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[1952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                        00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe[1504] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                              0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe[1504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                     0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe[1504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                    00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe[2816] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe[2816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69       0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe[2816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155      00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Launch Manager\LManager.exe[2808] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Launch Manager\LManager.exe[2808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Launch Manager\LManager.exe[2808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe[1988] C:\Windows\syswow64\user32.DLL!DialogBoxParamW                                               0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe[1988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                      0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe[1988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                     00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe[2220] C:\Windows\syswow64\user32.DLL!DialogBoxParamW                                              0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe[2220] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                     0000000077261465 2 bytes [26, 77]
.text   C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe[2220] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                    00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Launch Manager\LMworker.exe[4056] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Launch Manager\LMworker.exe[4056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Launch Manager\LMworker.exe[4056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2192] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                            0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                   0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                  00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe[4128] C:\Windows\syswow64\user32.DLL!DialogBoxParamW                                                                 0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe[4128] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                        0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe[4128] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                       00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4928] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                               0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4928] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                      0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[4928] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                     00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[2472] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[2472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6324] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe[7516] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                    0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe[7516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                           0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe[7516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                          00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Users\***\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe[5772] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                  0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Users\***\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe[5772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                         0000000077261465 2 bytes [26, 77]
.text   C:\Users\***\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe[5772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                        00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[3980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                0000000077261465 2 bytes [26, 77]
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[3980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                               00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2
.text   C:\Users\***\Desktop\gmer_2.1.19163.exe[7560] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                         0000000075e3cfca 5 bytes JMP 00000001735844c0
.text   C:\Users\***\Desktop\gmer_2.1.19163.exe[7560] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                0000000077261465 2 bytes [26, 77]
.text   C:\Users\***\Desktop\gmer_2.1.19163.exe[7560] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                               00000000772614bb 2 bytes [26, 77]
.text   ...                                                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread  C:\Windows\System32\svchost.exe [5164:6384]                                                                                                                            000007fef10f9688

---- EOF - GMER 2.1 ----