| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 8: Bekomme sehr viel Werbung/PC langsamWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.09.2013, 21:26
| #1 |
| |  Windows 8: Bekomme sehr viel Werbung/PC langsam Hallo zusammen! Erstmal sorry wenn ich hier etwas falsch mache, bin auf diesem Gebiet der Technik nicht so begabt, das Wort "Logfile" hab ich heute auf der Suche zum ersten Mal gehört... Seit gestern Mittag bekomme ich hier in Firefox auffällig viel Werbung, an der Seite, der Mitte, oben und unten. Oft über Spiele oder "ihr PC ist lahm, beheben Sie es hier...". Desweiteren sind manche Wörter einfach so als Link unterlegt, und wenn ich da dann mit der Maus drüber gehe, geht irgend ein kleines Fenster mit einer Suche auf. Auch pob-ups kommen oft. Auch habe ich die Meinung dass mein PC seitdem langsamer ist, kann aber sein das war auch schon vorher. Meine Schreibprogramme haben Ewigkeiten gebraucht, um ein Bild zu laden oder etwas zu speichern. Ich hoffe das Bild ist erlaubt, aber vielleicht hilft es ja etwas. So sah es gestern Abend aus, bevor ich wenigstens die Werbung mit einem add-on blockieren konnte.  Jetzt zu den "Logfiles". Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:07 on 13/09/2013 (Yannik)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
GMER sieht so aus: Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-13 21:57:58
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000002f Hitachi_HTS547575A9E384 rev.JE4OA50A 698,64GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Yannik\AppData\Local\Temp\pftyapog.sys
---- Kernel code sections - GMER 2.1 ----
.text C:\windows\System32\win32k.sys!W32pServiceTable fffff960001ab200 7 bytes [40, 3B, 82, 01, 00, 53, F2]
.text C:\windows\System32\win32k.sys!W32pServiceTable + 8 fffff960001ab208 7 bytes [01, 63, C0, FF, 00, 17, DB]
---- User code sections - GMER 2.1 ----
.text C:\windows\Explorer.EXE[3616] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f8d285177a 4 bytes [85, D2, F8, 07]
.text C:\windows\Explorer.EXE[3616] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f8d2851782 4 bytes [85, D2, F8, 07]
---- Threads - GMER 2.1 ----
Thread C:\windows\system32\csrss.exe [720:740] fffff960008535e8
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Norton findet nichts. Was könnte das sein? Hoffe, mir kann jemand helfen. Dankeschön schonmal! Grüße, greenturtle |
|
13.09.2013, 21:56
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 8: Bekomme sehr viel Werbung/PC langsam Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
13.09.2013, 22:07
| #3 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsam FRST.txt
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013 02
Ran by Yannik (administrator) on YANNIKSPC on 13-09-2013 23:01:38
Running from C:\Users\Yannik\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
() C:\windows\SysWOW64\PnkBstrA.exe
(Samsung Electronics Co., Ltd.) C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
() C:\Program Files (x86)\BlueStacks\HD-Adb.exe
(Microsoft Corporation) C:\windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Farbar) C:\Users\Yannik\Downloads\FRST64(1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoBandCustomize] 0
HKLM\...\Policies\Explorer: [NoToolbarCustomize] 0
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\Explorer: [NoBandCustomize] 0
HKCU\...\Policies\Explorer: [NoToolbarCustomize] 0
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
AppInit_DLLs: C:\Program Files (x86)\Search Results [253816 2013-03-12] ()
AppInit_DLLs-x32: C:\Program Files (x86)\Search Results [ ] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
SearchScopes: HKLM - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Yannik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Yannik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com
FF Extension: Search-Results Toolbar - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}.xpi
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2013.4.0.10\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (a2zLyrics-1) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.24.11_0
CHR Extension: (Google Docs) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (hola Toolbar) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla\1.1_0
CHR Extension: (Norton Identity Protection) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Gmail) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-11] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-18] ()
R2 Samsung Network Fax Server; C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [237056 2012-04-26] (Samsung Electronics Co., Ltd.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3017776 2013-07-12] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222360 2012-12-05] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-05] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130912.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130912.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130913.004\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130913.004\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130913.004\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130913.004\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-11] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
U3 pftyapog; \??\C:\Users\Yannik\AppData\Local\Temp\pftyapog.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-13 23:01 - 2013-09-13 23:01 - 00000000 ____D C:\FRST
2013-09-13 22:59 - 2013-09-13 23:00 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64(1).exe
2013-09-13 21:57 - 2013-09-13 21:57 - 00001296 _____ C:\Users\Yannik\Desktop\Gmer.log
2013-09-13 21:49 - 2013-09-13 21:49 - 00015719 _____ C:\Users\Yannik\Desktop\Unbenannt 1.odt
2013-09-13 21:35 - 2013-09-13 21:35 - 00377856 _____ C:\Users\Yannik\Downloads\gmer_2.1.19163.exe
2013-09-13 21:32 - 2013-09-13 21:33 - 01082677 _____ (Farbar) C:\Users\Yannik\Downloads\FRST.exe
2013-09-13 21:31 - 2013-09-13 21:33 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64.exe
2013-09-13 21:29 - 2013-09-13 22:07 - 00000474 _____ C:\Users\Yannik\Downloads\defogger_disable.log
2013-09-13 21:29 - 2013-09-13 21:29 - 00000000 _____ C:\Users\Yannik\defogger_reenable
2013-09-13 20:46 - 2013-09-13 20:46 - 00050477 _____ C:\Users\Yannik\Downloads\Defogger.exe
2013-09-13 19:54 - 2013-09-13 19:58 - 00008908 _____ C:\Users\Yannik\Downloads\hijackthis.log
2013-09-13 19:53 - 2013-09-13 19:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\Yannik\Downloads\HiJackThis204.exe
2013-09-13 19:50 - 2013-09-13 19:50 - 00001102 _____ C:\Users\Yannik\Desktop\Browser Hijack Recover(BHR).lnk
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 ____D C:\Program Files (x86)\Browser Hijack Recover
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 _____ C:\windows\SysWOW64\8104297.jun
2013-09-13 19:49 - 2013-09-13 19:50 - 02416480 _____ (Wamasoft,Inc. ) C:\Users\Yannik\Downloads\bhr22.exe
2013-09-13 19:06 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Yannik\Desktop\Schule
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:04 - 2013-09-13 19:04 - 00002639 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-09-13 19:04 - 2013-09-13 19:04 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 19:03 - 2013-09-13 19:04 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-09-13 16:04 - 2013-09-13 16:36 - 215056384 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86(1).msi
2013-09-13 15:59 - 2013-09-13 15:59 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-13 15:21 - 2013-09-13 15:44 - 161012010 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi.part
2013-09-13 15:21 - 2013-09-13 15:21 - 00000000 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi
2013-09-12 21:59 - 2013-09-12 21:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-12 21:57 - 2013-09-12 21:57 - 00307904 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-12 21:53 - 2013-09-12 21:55 - 00000000 ____D C:\AdwCleaner
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner.exe
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner(1).exe
2013-09-12 21:28 - 2013-09-13 22:20 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 21:28 - 2013-09-12 21:28 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 13:37 - 2013-09-05 22:09 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-12 13:37 - 2013-09-05 22:09 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 21:11 - 2013-09-11 21:14 - 20838036 _____ C:\Users\Yannik\Downloads\Soartex_Fanver.zip
2013-09-11 21:01 - 2010-10-21 02:00 - 00695296 _____ (AnjoCaido) C:\Users\Yannik\Desktop\MinecraftSP.exe
2013-09-11 18:58 - 2013-09-11 19:00 - 15536386 _____ C:\Users\Yannik\Downloads\LB Photo Realism x64.zip
2013-09-11 18:48 - 2013-09-13 15:58 - 00001216 _____ C:\windows\Tasks\a2zLyrics-1-codedownloader.job
2013-09-11 18:48 - 2013-09-13 15:58 - 00001116 _____ C:\windows\Tasks\a2zLyrics-1-enabler.job
2013-09-11 18:48 - 2013-09-11 18:48 - 00004220 _____ C:\windows\System32\Tasks\a2zLyrics-1-codedownloader
2013-09-11 18:48 - 2013-09-11 18:48 - 00004120 _____ C:\windows\System32\Tasks\a2zLyrics-1-enabler
2013-09-11 18:47 - 2013-09-13 15:58 - 00001848 _____ C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
2013-09-11 18:46 - 2013-09-13 15:58 - 00001924 _____ C:\windows\Tasks\a2zLyrics-1-chromeinstaller.job
2013-09-11 18:46 - 2013-09-12 13:31 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-11 18:45 - 2013-09-11 18:45 - 00166672 _____ () C:\Users\Yannik\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe
2013-09-11 18:13 - 2013-09-11 18:15 - 02069917 _____ C:\Users\Yannik\Downloads\minecraftforge-installer-1.6.2-9.10.1.859.jar
2013-09-11 18:12 - 2013-09-11 18:12 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4(1).jar
2013-09-11 17:59 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll
2013-09-11 15:13 - 2013-09-11 15:13 - 00103736 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-11 14:52 - 2013-09-12 13:51 - 00352256 _____ C:\Users\Yannik\Desktop\MinecraftNew.exe
2013-09-11 13:46 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-09-11 13:46 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-09-11 13:46 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-09-11 13:46 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-09-11 13:46 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-09-11 13:46 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-09-11 13:46 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-09-11 13:46 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-09-11 13:46 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-09-11 13:46 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-09-11 13:46 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
2013-09-11 13:45 - 2013-08-21 06:11 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-11 13:44 - 2013-08-21 06:12 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-11 13:44 - 2013-08-21 06:12 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-11 13:44 - 2013-08-21 06:11 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-11 13:44 - 2013-08-21 04:34 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-11 13:44 - 2013-08-21 04:06 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-11 13:44 - 2013-08-21 04:06 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-11 13:44 - 2013-08-21 04:06 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-11 13:44 - 2013-08-21 03:43 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-11 13:44 - 2013-08-21 01:52 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-09-11 13:43 - 2013-08-03 06:30 - 04038144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-11 13:43 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2013-09-11 13:43 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2013-09-11 13:43 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2013-09-11 13:43 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\windows\SysWOW64\LocationApi.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Wwanadvui.dll
2013-09-11 13:43 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\windows\system32\LocationApi.dll
2013-09-11 13:43 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2013-09-11 13:43 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2013-09-11 13:43 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-11 13:43 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2013-09-11 13:43 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-09-11 13:43 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2013-09-11 13:43 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-11 13:43 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2013-09-11 13:43 - 2013-07-02 00:08 - 00387583 _____ C:\windows\system32\ApnDatabase.xml
2013-09-11 13:43 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\windows\SysWOW64\openfiles.exe
2013-09-11 13:43 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\openfiles.exe
2013-09-11 13:43 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2013-09-11 13:43 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2013-09-11 13:43 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2013-09-11 13:43 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-09-11 13:43 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys
2013-09-11 13:43 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys
2013-09-11 13:43 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2013-09-11 13:43 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\wcmsvc.dll
2013-09-11 13:43 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2013-09-11 13:43 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2013-09-11 13:43 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2013-09-11 13:43 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2013-09-11 13:43 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2013-09-11 13:43 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinSCard.dll
2013-09-11 13:43 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll
2013-09-11 13:43 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys
2013-09-11 13:43 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-09-11 13:43 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-09-11 13:43 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2013-09-11 13:43 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-09-11 13:43 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-09-11 13:43 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-09-11 13:43 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2013-09-10 18:46 - 2013-09-10 18:46 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4.jar
2013-09-04 00:50 - 2013-09-04 00:50 - 00736161 _____ C:\Users\Yannik\Downloads\MiFileExplorer_v3.1.6_light_orange_build_201303072.zip
2013-09-03 23:59 - 2013-09-03 23:59 - 00000000 ____D C:\output
2013-08-17 21:41 - 2013-08-17 21:41 - 00002228 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-17 21:32 - 2013-08-17 21:36 - 25415728 _____ C:\Users\Yannik\Downloads\GoogleEarth1888Win.exe
2013-08-17 19:13 - 2013-08-17 19:13 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-17 13:25 - 2013-08-17 13:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 09:13 - 2013-08-17 09:14 - 00001944 _____ C:\{CAD1E1EC-B11D-42B1-9A8E-F8CBF25FE9A4}
2013-08-17 09:12 - 2013-08-17 09:12 - 00001920 _____ C:\{79C416D4-1DBE-4FC7-85E1-1FF5F6A5C6DE}
2013-08-14 19:58 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2013-08-14 19:58 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2013-08-14 11:23 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-14 11:23 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-14 11:23 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-14 11:18 - 2013-08-14 11:18 - 00002050 _____ C:\Users\Public\Desktop\Support Center.lnk
2013-08-14 11:18 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-14 11:18 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-14 11:18 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-14 11:18 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\apprepapi.dll
2013-08-14 11:18 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\apprepsync.dll
2013-08-14 11:18 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-14 11:18 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-14 11:18 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepapi.dll
2013-08-14 11:18 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\apprepsync.dll
==================== One Month Modified Files and Folders =======
2013-09-13 23:01 - 2013-09-13 23:01 - 00000000 ____D C:\FRST
2013-09-13 23:00 - 2013-09-13 22:59 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64(1).exe
2013-09-13 23:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-09-13 22:43 - 2012-09-18 13:15 - 00000360 _____ C:\windows\Tasks\Xerox PhotoCafe Communicator.job
2013-09-13 22:37 - 2013-08-12 15:27 - 00001130 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-13 22:20 - 2013-09-12 21:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-13 22:14 - 2013-06-14 17:59 - 00001144 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001UA.job
2013-09-13 22:07 - 2013-09-13 21:29 - 00000474 _____ C:\Users\Yannik\Downloads\defogger_disable.log
2013-09-13 21:57 - 2013-09-13 21:57 - 00001296 _____ C:\Users\Yannik\Desktop\Gmer.log
2013-09-13 21:49 - 2013-09-13 21:49 - 00015719 _____ C:\Users\Yannik\Desktop\Unbenannt 1.odt
2013-09-13 21:49 - 2013-05-21 18:55 - 00075264 ___SH C:\Users\Yannik\Desktop\Thumbs.db
2013-09-13 21:35 - 2013-09-13 21:35 - 00377856 _____ C:\Users\Yannik\Downloads\gmer_2.1.19163.exe
2013-09-13 21:33 - 2013-09-13 21:32 - 01082677 _____ (Farbar) C:\Users\Yannik\Downloads\FRST.exe
2013-09-13 21:33 - 2013-09-13 21:31 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64.exe
2013-09-13 21:29 - 2013-09-13 21:29 - 00000000 _____ C:\Users\Yannik\defogger_reenable
2013-09-13 21:29 - 2013-05-06 21:39 - 00000000 ____D C:\Users\Yannik
2013-09-13 21:10 - 2012-09-18 12:12 - 01682066 _____ C:\windows\WindowsUpdate.log
2013-09-13 21:06 - 2013-05-12 18:39 - 00000000 ____D C:\Users\Yannik\Desktop\Yannik
2013-09-13 20:46 - 2013-09-13 20:46 - 00050477 _____ C:\Users\Yannik\Downloads\Defogger.exe
2013-09-13 19:58 - 2013-09-13 19:54 - 00008908 _____ C:\Users\Yannik\Downloads\hijackthis.log
2013-09-13 19:53 - 2013-09-13 19:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\Yannik\Downloads\HiJackThis204.exe
2013-09-13 19:51 - 2013-05-06 21:42 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 19:50 - 2013-09-13 19:50 - 00001102 _____ C:\Users\Yannik\Desktop\Browser Hijack Recover(BHR).lnk
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 ____D C:\Program Files (x86)\Browser Hijack Recover
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 _____ C:\windows\SysWOW64\8104297.jun
2013-09-13 19:50 - 2013-09-13 19:49 - 02416480 _____ (Wamasoft,Inc. ) C:\Users\Yannik\Downloads\bhr22.exe
2013-09-13 19:32 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Yannik\Desktop\Schule
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:04 - 2013-09-13 19:04 - 00002639 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-09-13 19:04 - 2013-09-13 19:04 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 19:04 - 2013-09-13 19:03 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-09-13 19:03 - 2012-09-19 03:58 - 00754172 _____ C:\windows\system32\perfh007.dat
2013-09-13 19:03 - 2012-09-19 03:58 - 00156362 _____ C:\windows\system32\perfc007.dat
2013-09-13 19:03 - 2012-07-26 09:28 - 01748838 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-13 16:48 - 2013-05-06 21:50 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001
2013-09-13 16:36 - 2013-09-13 16:04 - 215056384 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86(1).msi
2013-09-13 16:01 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\NDF
2013-09-13 15:59 - 2013-09-13 15:59 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-13 15:59 - 2013-08-12 15:27 - 00001126 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-13 15:58 - 2013-09-11 18:48 - 00001216 _____ C:\windows\Tasks\a2zLyrics-1-codedownloader.job
2013-09-13 15:58 - 2013-09-11 18:48 - 00001116 _____ C:\windows\Tasks\a2zLyrics-1-enabler.job
2013-09-13 15:58 - 2013-09-11 18:47 - 00001848 _____ C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
2013-09-13 15:58 - 2013-09-11 18:46 - 00001924 _____ C:\windows\Tasks\a2zLyrics-1-chromeinstaller.job
2013-09-13 15:58 - 2012-09-18 12:55 - 00000868 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-09-13 15:58 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-09-13 15:57 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-13 15:57 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-09-13 15:44 - 2013-09-13 15:21 - 161012010 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi.part
2013-09-13 15:21 - 2013-09-13 15:21 - 00000000 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi
2013-09-12 21:59 - 2013-09-12 21:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-12 21:57 - 2013-09-12 21:57 - 00307904 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-12 21:55 - 2013-09-12 21:53 - 00000000 ____D C:\AdwCleaner
2013-09-12 21:55 - 2013-06-12 17:08 - 00000000 ____D C:\ProgramData\Datamngr
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner.exe
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner(1).exe
2013-09-12 21:28 - 2013-09-12 21:28 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 21:28 - 2013-05-08 21:20 - 00000000 ____D C:\Users\Yannik\AppData\Local\Adobe
2013-09-12 13:53 - 2013-05-07 18:53 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\.minecraft
2013-09-12 13:51 - 2013-09-11 14:52 - 00352256 _____ C:\Users\Yannik\Desktop\MinecraftNew.exe
2013-09-12 13:35 - 2012-08-05 23:07 - 01267490 _____ C:\windows\PFRO.log
2013-09-12 13:33 - 2013-08-13 14:45 - 00000000 ____D C:\windows\system32\MRT
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\WinStore
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\PolicyDefinitions
2013-09-12 13:33 - 2012-07-26 07:38 - 00000000 ____D C:\windows\system32\oobe
2013-09-12 13:31 - 2013-09-11 18:46 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-12 13:30 - 2013-05-07 18:31 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-11 21:14 - 2013-09-11 21:11 - 20838036 _____ C:\Users\Yannik\Downloads\Soartex_Fanver.zip
2013-09-11 19:00 - 2013-09-11 18:58 - 15536386 _____ C:\Users\Yannik\Downloads\LB Photo Realism x64.zip
2013-09-11 18:48 - 2013-09-11 18:48 - 00004220 _____ C:\windows\System32\Tasks\a2zLyrics-1-codedownloader
2013-09-11 18:48 - 2013-09-11 18:48 - 00004120 _____ C:\windows\System32\Tasks\a2zLyrics-1-enabler
2013-09-11 18:45 - 2013-09-11 18:45 - 00166672 _____ () C:\Users\Yannik\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe
2013-09-11 18:15 - 2013-09-11 18:13 - 02069917 _____ C:\Users\Yannik\Downloads\minecraftforge-installer-1.6.2-9.10.1.859.jar
2013-09-11 18:12 - 2013-09-11 18:12 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4(1).jar
2013-09-11 16:38 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-09-11 15:13 - 2013-09-11 15:13 - 00103736 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-10 18:46 - 2013-09-10 18:46 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4.jar
2013-09-08 10:50 - 2012-09-18 12:55 - 00000870 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-05 22:16 - 2013-08-04 23:18 - 00000000 ____D C:\Users\Yannik\Desktop\MENORCA
2013-09-05 22:09 - 2013-09-12 13:37 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-05 22:09 - 2013-09-12 13:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-04 22:17 - 2013-06-14 18:05 - 00002376 _____ C:\Users\Yannik\Desktop\Google Chrome.lnk
2013-09-04 00:50 - 2013-09-04 00:50 - 00736161 _____ C:\Users\Yannik\Downloads\MiFileExplorer_v3.1.6_light_orange_build_201303072.zip
2013-09-04 00:14 - 2013-06-14 17:59 - 00001092 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core.job
2013-09-03 23:59 - 2013-09-03 23:59 - 00000000 ____D C:\output
2013-08-27 15:13 - 2013-05-06 21:50 - 00000000 ____D C:\Users\Yannik\Desktop\Ordner
2013-08-21 15:11 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2013-08-21 09:39 - 2013-05-06 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-21 06:12 - 2013-09-11 13:44 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-21 06:12 - 2013-09-11 13:44 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-21 06:11 - 2013-09-11 13:45 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-21 04:34 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-21 04:06 - 2013-09-11 13:44 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-21 03:43 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-21 01:52 - 2013-09-11 13:44 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-08-20 11:42 - 2013-05-06 21:42 - 00000000 ____D C:\Users\Yannik\AppData\Local\Samsung
2013-08-20 11:42 - 2012-09-18 13:00 - 00000000 ____D C:\ProgramData\SAMSUNG
2013-08-20 11:42 - 2012-09-18 12:12 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-08-17 21:41 - 2013-08-17 21:41 - 00002228 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-17 21:41 - 2013-08-12 15:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-17 21:41 - 2013-06-14 17:59 - 00000000 ____D C:\Users\Yannik\AppData\Local\Google
2013-08-17 21:36 - 2013-08-17 21:32 - 25415728 _____ C:\Users\Yannik\Downloads\GoogleEarth1888Win.exe
2013-08-17 19:13 - 2013-08-17 19:13 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-17 19:13 - 2013-07-18 15:45 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-08-17 13:26 - 2013-08-17 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 09:14 - 2013-08-17 09:13 - 00001944 _____ C:\{CAD1E1EC-B11D-42B1-9A8E-F8CBF25FE9A4}
2013-08-17 09:12 - 2013-08-17 09:12 - 00001920 _____ C:\{79C416D4-1DBE-4FC7-85E1-1FF5F6A5C6DE}
2013-08-16 07:41 - 2013-09-11 13:46 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-08-16 07:39 - 2013-09-11 13:46 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-08-16 07:39 - 2013-09-11 13:46 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-08-16 07:32 - 2013-09-11 13:46 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-08-16 07:21 - 2013-09-11 13:46 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-08-16 07:20 - 2013-09-11 13:46 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-08-16 00:43 - 2013-09-11 13:46 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
2013-08-14 11:51 - 2013-05-10 14:44 - 00000000 ____D C:\Users\Yannik\Documents\Scan
2013-08-14 11:51 - 2013-05-06 21:41 - 00000000 ____D C:\Users\Yannik\AppData\Local\CrashDumps
2013-08-14 11:18 - 2013-08-14 11:18 - 00002050 _____ C:\Users\Public\Desktop\Support Center.lnk
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Yannik\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe
C:\Users\Yannik\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Yannik\AppData\Local\Temp\DeltaTB.exe
C:\Users\Yannik\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Yannik\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
C:\Users\Yannik\AppData\Local\Temp\fp_pl_pfs_installer-3.exe
C:\Users\Yannik\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Yannik\AppData\Local\Temp\i4jdel0.exe
C:\Users\Yannik\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Yannik\AppData\Local\Temp\UpdateCheckerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-09 15:09
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-09-2013 02
Ran by Yannik at 2013-09-13 23:02:34
Running from C:\Users\Yannik\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20 (x32)
a2zLyrics-1 (x32 Version: 1.28.153.2)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader X (10.1.3) MUI (x32 Version: 10.1.3)
AGEIA PhysX v2.6.0 (x32 Version: 2.6.0.4)
Allshare Play Link (x32 Version: 1.0.0)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.881.0)
Bandicam (x32 Version: 1.8.9.371)
Bandisoft MPEG-1 Decoder (x32)
BlueStacks App Player (x32 Version: 0.7.12.896)
BlueStacks Notification Center (x32 Version: 0.7.12.896)
Browser Hijack Recover(BHR) 2.2 (x32)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Profiles Mobile (x32 Version: 2012.0806.1156.19437)
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437)
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437)
CCC Help Czech (x32 Version: 2012.0806.1155.19437)
CCC Help Danish (x32 Version: 2012.0806.1155.19437)
CCC Help Dutch (x32 Version: 2012.0806.1155.19437)
CCC Help English (x32 Version: 2012.0806.1155.19437)
CCC Help Finnish (x32 Version: 2012.0806.1155.19437)
CCC Help French (x32 Version: 2012.0806.1155.19437)
CCC Help German (x32 Version: 2012.0806.1155.19437)
CCC Help Greek (x32 Version: 2012.0806.1155.19437)
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437)
CCC Help Italian (x32 Version: 2012.0806.1155.19437)
CCC Help Japanese (x32 Version: 2012.0806.1155.19437)
CCC Help Korean (x32 Version: 2012.0806.1155.19437)
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437)
CCC Help Polish (x32 Version: 2012.0806.1155.19437)
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437)
CCC Help Russian (x32 Version: 2012.0806.1155.19437)
CCC Help Spanish (x32 Version: 2012.0806.1155.19437)
CCC Help Swedish (x32 Version: 2012.0806.1155.19437)
CCC Help Thai (x32 Version: 2012.0806.1155.19437)
CCC Help Turkish (x32 Version: 2012.0806.1155.19437)
ccc-utility64 (Version: 2012.0806.1156.19437)
Common Desktop Agent (Version: 1.62.0)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02)
D3DX10 (x32 Version: 15.4.2368.0902)
Easy File Share (x32 Version: 1.3.4)
E-POP (x32 Version: 1.0.1)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
Fotogalerie (x32 Version: 16.4.3503.0728)
Galerie de photos (x32 Version: 16.4.3503.0728)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (HKCU Version: 29.0.1547.66)
Google Drive (x32 Version: 1.11.4865.2530)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Help Desk (Version: 1.0.9)
Intel AppUp(SM) center (x32 Version: 3.6.1.33070.11)
Intel(R) Control Center (x32 Version: 1.2.1.1008)
Intel(R) Display Audio Driver (x32 Version: 6.14.00.3097)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36354)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
LibreOffice 4.1.1.2 (x32 Version: 4.1.1.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Minecraft Note Block Studio version 3.1.3 (x32 Version: 3.1.3)
Movie Maker (x32 Version: 16.4.3503.0728)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1108.0727)
Nero Burning ROM (x32 Version: 12.5.5001)
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000)
Nero BurningROM 12 (x32 Version: 12.5.01300)
Nero ControlCenter (x32 Version: 11.0.15600)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000)
Nero Core Components (x32 Version: 11.0.21800)
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)
Nero Update (x32 Version: 11.0.11800.31.0)
Norton Identity Safe (x32 Version: 2013.4.0.10)
Norton Internet Security (x32 Version: 20.4.0.40)
Norton Online Backup (x32 Version: 2.2.3.45)
Norton Online Backup ARA (x32 Version: 4.1.0.11)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Photo Common (x32 Version: 16.4.3503.0728)
Photo Gallery (x32 Version: 16.4.3503.0728)
PhotoScape (x32)
Plants vs. Zombies (x32)
Prerequisite installer (x32 Version: 12.0.0003)
PX Profile Update (x32 Version: 1.00.1.)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.216)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0)
Raccolta foto (x32 Version: 16.4.3503.0728)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6702)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39030)
S Agent (Version: 1.1.42)
Samsung CLX-3300 Series (x32 Version: 1.04 (07.07.2012))
Samsung Easy Document Creator (x32 Version: 1.03.13 (29.06.2012))
Samsung Easy Printer Manager (x32 Version: 1.02.57.00(05.07.2012))
Samsung Network PC Fax (x32 Version: 1.06.24 (25.04.2012))
Samsung Printer Live Update (x32 Version: 1.01.00.04)
Samsung Scan Process Machine (x32 Version: 1.00.20.00)
Search-Results Toolbar (x32 Version: 1.2.0.0)
Settings (x32 Version: 2.0.0)
SNS Upload for Easy Document Creator (x32 Version: 1.0.0)
Support Center (Version: 2.1.1106)
Support Center FAQ (x32 Version: 1.0.11)
SW Update (x32 Version: 2.1.17)
Synaptics Pointing Device Driver (Version: 16.2.11.3)
User Guide (x32 Version: 1.2.00)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (Version: 07/27/2012 20.57.1.735)
Windows Live (x32 Version: 16.4.3503.0728)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728)
Windows Live Essentials (x32 Version: 16.4.3503.0728)
Windows Live Installer (x32 Version: 16.4.3503.0728)
Windows Live Photo Common (x32 Version: 16.4.3503.0728)
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728)
Windows Live SOXE (x32 Version: 16.4.3503.0728)
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728)
Windows Live UX Platform (x32 Version: 16.4.3503.0728)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728)
WinRAR 4.20 (32-bit) (x32 Version: 4.20.0)
Xerox PhotoCafe (x32 Version: 1.0.0.6162)
==================== Restore Points =========================
20-08-2013 09:40:42 Removed Quick Starter
02-09-2013 16:01:33 Geplanter Prüfpunkt
11-09-2013 11:47:16 Windows Update
13-09-2013 17:02:11 Installed LibreOffice 4.1.1.2
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {01BF7370-5418-4DBB-BE3D-14104467FB12} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {05A62DD8-60AA-4C4E-A994-9BCDBF197239} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\SymErr.exe [2013-05-30] (Symantec Corporation)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\System32\sysmain.dll [2013-05-04] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\WSClient.dll [2013-08-16] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {2FBE426C-F70A-42C3-BDF0-5933E87025F0} - System32\Tasks\a2zLyrics-1-firefoxinstaller => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-firefoxinstaller.exe [2013-09-11] (Lyrics)
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {384BE781-5910-4849-8492-38CBD0AF0425} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {38C5BC33-D6B7-4032-8903-3769B633BB89} - System32\Tasks\a2zLyrics-1-enabler => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-enabler.exe [2013-09-11] (Lyrics)
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3B817D30-94B8-457E-A302-1DDA92A7F577} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {4210E5AE-40DD-4E71-A832-BA477011A916} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {444F75D4-3568-40AB-BB4E-5E088B7FFFB1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001UA => C:\Users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-14] (Google Inc.)
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2013-06-01] (Microsoft Corporation)
Task: {48F2142D-FAD6-42FD-B1CF-8B84D40BAEE0} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()
Task: {4989729C-BE1F-4BF0-B5C1-25CF2C48FE1C} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {55A71CE9-A563-4500-8F9D-991DBB074751} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {6D643E9D-6F9C-4108-9FF3-52904B0C9996} - System32\Tasks\a2zLyrics-1-codedownloader => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-codedownloader.exe [2013-09-11] (Lyrics)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {789305D1-A5DB-43A8-807C-0B0A8373272F} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {9B0CF522-3D48-4794-B58B-B8B417BD4A87} - \BrowserDefendert No Task File
Task: {9B72AC5B-7FBF-48A6-A20C-E60F07DD013B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {9DCAE56A-934A-4476-8952-E3B213C0E1F2} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-06-05] (Samsung Electronics CO., LTD.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\WSClient.dll [2013-08-16] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {ACA1E77A-9AEA-48AA-8393-77A5338D7969} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-12] (Google Inc.)
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B08067A5-E7F8-44D3-A51E-30AE38050839} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {BD2DCB94-9C6B-49D4-90DD-F6B4E6DF0B9C} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {BEB2FCB2-B7F4-4A85-B240-B1719C1801E0} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {BF3231B8-E289-494B-A520-FFEA6CAE6D21} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-12] (Adobe Systems Incorporated)
Task: {BF65D3D6-E894-4E93-9D43-F18B6A577589} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core => C:\Users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-14] (Google Inc.)
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C1DFD4EA-D610-400D-99B1-08749A0A672A} - System32\Tasks\a2zLyrics-1-chromeinstaller => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-chromeinstaller.exe [2013-09-11] (Lyrics)
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C5B98D48-E502-4699-9943-4605F92CA428} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\System32\Windows.Storage.ApplicationData.dll [2012-07-26] (Microsoft Corporation)
Task: {C6C1B987-CF74-4F38-97CC-0F315CE7045C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-12] (Google Inc.)
Task: {C7E5D93A-A48A-4826-B655-0E70F0CB43EF} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001
Task: {C97917C4-0417-48AD-9F9D-187A3220FC1C} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\SymErr.exe [2013-05-30] (Symantec Corporation)
Task: {CCAA43C7-A484-4D97-8B40-495CB3711C68} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D2C69017-2FD6-4C25-831A-DEE77EC3BC38} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => Sc.exe start wuauserv
Task: {D3EDDF7D-E71C-498B-B4D6-86E54914142B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {DBAD3849-D1F4-4842-882B-BD994AD064AB} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E7562836-8C83-4C66-87A8-E9CE3FBFB501} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EAD237E7-D276-4257-9F16-51DF41548733} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\System32\Startupscan.dll [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F1622147-E731-43B1-8D44-974175930472} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: C:\windows\Tasks\a2zLyrics-1-chromeinstaller.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-chromeinstaller.exe
Task: C:\windows\Tasks\a2zLyrics-1-codedownloader.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-codedownloader.exe
Task: C:\windows\Tasks\a2zLyrics-1-enabler.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-enabler.exe
Task: C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job => C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-firefoxinstaller.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core.job => C:\Users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001UA.job => C:\Users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\windows\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe
==================== Loaded Modules (whitelisted) =============
2013-05-07 13:35 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\taskhostex.exe
2013-07-10 18:29 - 2013-05-21 06:44 - 00144368 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe
2012-08-24 13:57 - 2012-08-24 13:57 - 02917176 _____ (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
2012-08-24 13:57 - 2012-08-24 13:57 - 01046328 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2012-08-24 13:57 - 2012-08-24 13:57 - 00228664 _____ (Synaptics Incorporated) C:\windows\SYSTEM32\SynTPAPI.dll
2012-08-24 13:57 - 2012-08-24 13:57 - 12327736 _____ (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPRes.dll
2013-07-17 14:58 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\windows\Explorer.EXE
2012-07-26 03:22 - 2012-07-26 05:05 - 00060416 _____ (Microsoft Corporation) C:\windows\System32\IME\SHARED\IMEROAMING.DLL
2013-07-11 19:26 - 2013-05-21 06:44 - 01060232 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine64\20.4.0.40\ccL120U.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00119176 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine64\20.4.0.40\ccVrTrst.dll
2013-07-11 19:26 - 2013-05-23 07:25 - 00114056 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine64\20.4.0.40\EFACli64.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00475528 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine64\20.4.0.40\ccSet.dll
2013-07-11 19:26 - 2013-05-30 03:23 - 00553264 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine64\20.4.0.40\diStRptr.dll
2012-07-20 08:20 - 2012-07-20 08:20 - 00438784 _____ (Intel Corporation) C:\windows\system32\igfxrDEU.lrc
2013-01-23 09:53 - 2013-01-23 09:53 - 00051536 ____R (Nero AG) C:\Program Files (x86)\Common Files\Nero\NeroShellExt\x64\SolutionExplorer.dll
2012-07-26 09:55 - 2012-07-26 09:53 - 00170864 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00144368 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
2012-09-18 12:51 - 2012-08-10 11:14 - 13191824 _____ (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
2012-07-20 08:52 - 2012-07-20 08:52 - 00170304 _____ (Intel Corporation) C:\Windows\System32\igfxtray.exe
2012-07-20 08:52 - 2012-07-20 08:52 - 00398656 _____ (Intel Corporation) C:\Windows\System32\hkcmd.exe
2012-07-20 08:52 - 2012-07-20 08:52 - 00440640 _____ (Intel Corporation) C:\Windows\System32\igfxpers.exe
2012-07-20 08:16 - 2012-07-20 08:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-02-20 22:23 - 2012-02-20 22:23 - 00456704 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-02-20 22:23 - 2012-02-20 22:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2012-12-05 20:44 - 2012-12-05 20:44 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-12-05 20:39 - 2012-12-05 20:39 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2012-12-05 20:41 - 2012-12-05 20:41 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-10 13:41 - 2012-04-26 10:10 - 00273408 _____ (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
2012-12-05 20:44 - 2012-12-05 20:44 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2013-05-13 13:21 - 2013-05-13 13:21 - 00601928 _____ (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
2013-06-05 07:28 - 2013-06-05 07:28 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-07-26 01:59 - 2012-07-26 06:55 - 00033504 _____ (Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe
2012-08-24 13:57 - 2012-08-24 13:57 - 00123704 _____ (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
2012-08-06 04:52 - 2012-08-06 04:52 - 00311296 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2012-08-06 04:51 - 2012-08-06 04:51 - 00196608 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2011-10-18 15:08 - 2011-10-18 15:08 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2012-08-06 04:55 - 2012-08-06 04:55 - 00028672 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2012-08-06 04:54 - 2012-08-06 04:54 - 00369664 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-09-02 19:08 - 2011-09-02 19:08 - 00410911 _____ () C:\Program Files (x86)\BlueStacks\HD-Adb.exe
2012-07-26 03:27 - 2012-07-26 05:08 - 00126464 _____ (Microsoft Corporation) C:\windows\splwow64.exe
2013-05-09 09:05 - 2012-11-06 06:18 - 00914432 ____C (Microsoft Corporation) C:\windows\System32\DriverStore\FileRepository\ntprint.inf_amd64_70804bc81126e090\Amd64\mxdwdrv.dll
2013-05-07 06:54 - 2013-02-02 13:04 - 02676736 _____ (Microsoft Corporation) C:\windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_3cfd0cd4f058da8e\Amd64\PrintConfig.dll
2013-05-07 13:35 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe
2013-09-12 21:28 - 2013-09-12 21:28 - 01862024 _____ (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
2013-05-20 12:12 - 2013-04-09 06:52 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2013-09-13 22:59 - 2013-09-13 23:00 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64(1).exe
2013-07-10 18:29 - 2013-05-21 06:44 - 00705928 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccL120U.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00089480 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccVrTrst.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00157576 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvc.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00159624 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccIPC.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00401288 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\CCJOBMGR.DLL
2013-07-10 18:29 - 2013-05-31 03:46 - 00999760 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\CODATAPR.DLL
2013-07-10 18:29 - 2013-05-31 03:48 - 00551760 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\coShdObj.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00345480 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSet.dll
2013-07-10 18:29 - 2013-05-31 03:48 - 01397584 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\COACTMGR.DLL
2013-07-10 18:29 - 2012-05-30 16:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\wincfi39.dll
2013-07-10 18:29 - 2013-05-21 06:44 - 00289160 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccGEvt.dll
2013-07-10 18:29 - 2013-05-30 04:13 - 01078576 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\DataStor.dll
2013-07-10 18:29 - 2013-05-30 04:13 - 00965936 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\Comm.dll
2013-07-10 18:29 - 2013-05-21 00:50 - 02651472 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\CLTALDIS.DLL
2013-07-10 18:29 - 2013-05-21 00:50 - 00634192 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\cltPE.dll
2013-07-10 18:29 - 2013-05-30 04:13 - 00028464 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON IDENTITY SAFE\ENGINE\2013.4.0.10\USERCTXT.DLL
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00705928 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccL120U.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00089480 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccVrTrst.dll
2013-07-11 19:26 - 2013-05-23 07:25 - 00086408 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\EFACli.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00157576 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvc.dll
2013-07-11 19:26 - 2013-05-21 06:40 - 00410576 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\srtsp32.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00159624 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccIPC.dll
2013-07-11 19:26 - 2013-06-04 06:42 - 00548688 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\NPCTRAY.DLL
2013-07-11 19:26 - 2013-05-21 06:44 - 00345480 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSet.dll
2013-07-11 19:26 - 2013-06-04 06:43 - 00962384 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\uiMain.dll
2013-07-11 19:26 - 2013-05-28 09:42 - 02430800 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SYMHTMDX.DLL
2013-07-11 19:26 - 2013-05-30 03:22 - 00320816 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\diStRptr.dll
2013-07-11 19:26 - 2013-05-30 04:13 - 01337136 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\MClnTask.dll
2013-07-14 20:06 - 2013-06-28 07:17 - 01849168 _____ (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\isDataPr.dll
2013-07-11 19:26 - 2013-05-21 00:50 - 00932176 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\cltPE.dll
2013-07-13 18:56 - 2013-07-03 23:42 - 00821552 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\naHelper.dll
2013-07-11 19:26 - 2013-06-04 06:42 - 00548176 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\ASHELPER.DLL
2013-07-11 19:26 - 2013-06-04 06:42 - 00579408 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\ASOEHOOK.DLL
2013-07-11 19:26 - 2013-06-04 06:42 - 00537424 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\AVPAPP32.DLL
2013-07-11 19:26 - 2013-05-21 06:44 - 00401288 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CCJOBMGR.DLL
2013-07-11 19:26 - 2013-05-24 04:09 - 00502664 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\AVIfc.dll
2013-07-11 19:26 - 2013-05-21 00:50 - 02651472 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CLTALDIS.DLL
2013-07-11 19:26 - 2013-06-04 06:42 - 00528208 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\FWSESAL.DLL
2013-07-11 19:26 - 2013-06-10 19:10 - 00629072 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\MUI\20.4.0.40\07\01\cltRes.loc
2013-07-11 19:26 - 2013-05-21 00:50 - 01035088 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\cltLMS.dll
2013-07-11 19:26 - 2013-05-31 03:46 - 00999760 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\CODATAPR.DLL
2013-07-11 19:26 - 2013-05-31 03:48 - 00551760 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coShdObj.dll
2013-07-11 19:26 - 2013-05-31 03:48 - 01397584 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\COACTMGR.DLL
2013-07-11 19:26 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00289160 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccGEvt.dll
2013-07-11 19:26 - 2013-06-04 06:42 - 00502608 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\NUEX.DLL
2013-07-11 19:26 - 2013-05-30 04:13 - 01078576 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\DataStor.dll
2013-07-11 19:26 - 2013-05-30 04:13 - 00965936 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Comm.dll
2013-07-11 19:26 - 2013-06-04 06:43 - 00243024 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\QSPLUGIN.DLL
2013-07-11 19:26 - 2012-05-15 03:27 - 00588216 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\SDKCMN.DLL
2013-07-11 19:26 - 2013-06-04 06:43 - 00916304 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\UIALERT.DLL
2013-07-11 19:26 - 2013-05-30 04:13 - 00028464 ____R (Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\USERCTXT.DLL
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2013-07-11 19:26 - 2013-06-04 06:42 - 03857232 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ncw.dll
2013-07-11 19:26 - 2013-05-24 04:09 - 00284552 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\AppMgr32.dll
2013-07-11 19:26 - 2013-06-04 06:43 - 01065808 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Settings.dll
2013-07-11 19:26 - 2013-05-21 06:44 - 00324488 ____R (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsubeng.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00136192 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxmlsec-mscrypto.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00303616 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxmlsec.dll
2012-09-18 13:12 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-08-17 19:26 - 2013-08-17 19:26 - 00650752 _____ (BlueStack Systems, Inc.) C:\windows\assembly\NativeImages_v2.0.50727_32\HD-Agent\ec4051cabd3ab6e7aa3eb1ee875ddc8f\HD-Agent.ni.exe
2013-08-17 19:28 - 2013-08-17 19:28 - 00155136 _____ (CodeTitans) C:\windows\assembly\NativeImages_v2.0.50727_32\JSON\a0958bf8f17908d2575c06c3d43af70d\JSON.ni.dll
2013-05-13 13:22 - 2013-05-13 13:22 - 00128840 _____ (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-ShortcutHandler.dll
2013-08-17 19:30 - 2013-08-17 19:30 - 00366592 _____ (Intel Corporation) C:\windows\assembly\NativeImages_v4.0.30319_32\IAStorUtil\ddbdad196d6ec27aca38e6e7b05a117b\IAStorUtil.ni.dll
2013-07-28 01:22 - 2013-07-28 01:22 - 00026112 _____ (Intel Corp.) C:\windows\assembly\NativeImages_v4.0.30319_32\IAStorCommon\3baf6eefe8ca1de3ae7111a70e477255\IAStorCommon.ni.dll
2013-08-17 13:26 - 2013-08-17 13:26 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/12/2013 09:09:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Error: (09/12/2013 09:09:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Error: (09/12/2013 01:29:25 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/12/2013 01:28:27 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 10:02:51 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 10:02:40 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (09/11/2013 08:33:17 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: YANNIKSPC)
Description: Bei der Aktivierung der App „SymantecCorporation.NortonStudio_v68kp9n051hdp!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
System errors:
=============
Error: (09/12/2013 01:33:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8007045b fehlgeschlagen: Update für Microsoft .NET Framework 3.5 unter Windows 8 und Windows Server 2012 für x64-basierte Systeme (KB2836946)
Error: (09/11/2013 02:54:44 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SW Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/11/2013 02:51:48 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "YANNIKSPC" auf Transport "NetBT_Tcpip_{83FF6AEB-B3D1-430F-B3D2-D431FDBC3517}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (09/03/2013 10:47:53 PM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (09/03/2013 10:47:50 PM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (09/02/2013 07:53:23 PM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (09/02/2013 07:53:22 PM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (09/01/2013 10:45:34 AM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (09/01/2013 10:45:31 AM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Error: (08/27/2013 06:24:48 PM) (Source: DCOM) (User: YANNIKSPC)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}YanniksPCYannikS-1-5-21-2678595623-4148133582-4009595467-1001LocalHost (unter Verwendung von LRPC)DeutscheTelekomAG.t-online.de_1.1.1.0_neutral__h7n2m9q1wb810S-1-15-2-713692698-2537843505-908369992-2803236565-3154284271-4180107460-415027963
Microsoft Office Sessions:
=========================
Error: (09/12/2013 09:09:14 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Users\Yannik\Downloads\SoftonicDownloader_fuer_mcedit(1).exe
Error: (09/12/2013 09:09:14 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Users\Yannik\Downloads\SoftonicDownloader_fuer_mcedit.exe
Error: (09/12/2013 01:29:25 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/12/2013 01:28:27 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 10:02:52 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 10:02:51 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 10:02:40 PM) (Source: ATIeRecord)(User: )
Description:
Error: (09/11/2013 08:33:17 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: YANNIKSPC)
Description: SymantecCorporation.NortonStudio_v68kp9n051hdp!App-2147023170
CodeIntegrity Errors:
===================================
Date: 2013-07-26 17:26:05.557
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Yannik\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-26 17:26:04.870
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-06-03 17:57:55.305
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Yannik\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-06-03 17:57:54.335
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 43%
Total physical RAM: 6035.42 MB
Available physical RAM: 3398.54 MB
Total Pagefile: 10643.42 MB
Available Pagefile: 7435 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:673.74 GB) (Free:598.94 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 4F494D44)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
14.09.2013, 19:54
| #4 | |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsamCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.09.2013, 21:28
| #5 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsam Hab ein schlechtes Gefühl. Hat sehr viel länger als die besagten 10 Minuten gedauert.... Code:
ATTFilter ComboFix 13-09-14.01 - Yannik 14.09.2013 21:17:38.1.8 - x64
Microsoft Windows 8 6.2.9200.0.1252.49.1031.18.6035.2400 [GMT 2:00]
ausgeführt von:: c:\users\Yannik\Downloads\ComboFix.exe
AV: Norton Internet Security Online *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security Online *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security Online *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Yannik\AppData\Local\Google\Chrome\User Data\Default\preferences
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-08-14 bis 2013-09-14 ))))))))))))))))))))))))))))))
.
.
2013-09-13 21:01 . 2013-09-13 21:01 -------- d-----w- C:\FRST
2013-09-13 17:50 . 2013-09-13 17:50 -------- d-----w- c:\program files (x86)\Browser Hijack Recover
2013-09-13 17:04 . 2013-09-13 17:04 -------- d-----w- c:\users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 17:03 . 2013-09-13 17:04 -------- d-----w- c:\program files (x86)\LibreOffice 4
2013-09-12 19:59 . 2013-09-12 19:59 -------- d-----w- c:\programdata\boost_interprocess
2013-09-12 19:53 . 2013-09-12 19:55 -------- d-----w- C:\AdwCleaner
2013-09-12 11:37 . 2013-09-05 20:09 78296 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-12 11:37 . 2013-09-05 20:09 694232 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-11 16:46 . 2013-09-14 16:46 -------- d-----w- c:\program files (x86)\a2zLyrics-1
2013-09-11 15:59 . 2013-08-07 05:15 144896 ----a-w- c:\windows\system32\tssdisai.dll
2013-09-11 13:13 . 2013-09-11 13:13 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-09-11 11:45 . 2013-08-21 04:11 19246592 ----a-w- c:\windows\system32\mshtml.dll
2013-09-03 21:59 . 2013-09-03 21:59 -------- d-----w- C:\output
2013-08-17 17:13 . 2013-08-17 17:13 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-12 11:30 . 2013-05-07 16:31 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-08-17 17:13 . 2013-07-18 13:45 281768 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-07-18 13:39 . 2013-07-17 12:38 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-07-13 06:18 . 2013-08-14 09:18 337408 ----a-w- c:\windows\system32\wintrust.dll
2013-07-13 06:16 . 2013-08-14 09:18 68096 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-13 06:16 . 2013-08-14 09:18 1889280 ----a-w- c:\windows\system32\crypt32.dll
2013-07-13 06:15 . 2013-08-14 09:18 98304 ----a-w- c:\windows\system32\apprepsync.dll
2013-07-13 06:15 . 2013-08-14 09:18 124416 ----a-w- c:\windows\system32\apprepapi.dll
2013-07-13 04:24 . 2013-08-14 09:18 261120 ----a-w- c:\windows\SysWow64\wintrust.dll
2013-07-13 04:23 . 2013-08-14 09:18 1568256 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-07-13 04:23 . 2013-08-14 09:18 87040 ----a-w- c:\windows\SysWow64\apprepapi.dll
2013-07-13 04:23 . 2013-08-14 09:18 74240 ----a-w- c:\windows\SysWow64\apprepsync.dll
2013-07-11 17:27 . 2013-07-10 16:41 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-07-09 06:07 . 2013-08-14 09:23 2233168 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-07-02 00:44 . 2013-08-14 17:58 36288 ----a-w- c:\windows\system32\drivers\WdBoot.sys
2013-07-01 22:08 . 2013-08-14 17:58 247216 ----a-w- c:\windows\system32\drivers\WdFilter.sys
2013-06-16 22:41 . 2013-07-17 12:58 997632 ----a-w- c:\windows\system32\drivers\ndis.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
Samsung Network PC Fax.lnk - c:\windows\System32\spool\drivers\x64\3\NetFaxTray64.exe [2013-5-10 273408]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R0 SymELAM;Symantec ELAM Driver;c:\windows\system32\drivers\NISx64\1404000.028\SymELAM.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SymELAM.sys [x]
R2 SWUpdateService;SW Update Service;c:\programdata\Samsung\SW Update Service\SWMAgent.exe;c:\programdata\Samsung\SW Update Service\SWMAgent.exe [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 WSDScan;WSD-Scanunterstützung;c:\windows\System32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\System32\drivers\amdkmpfd.sys;c:\windows\SYSNATIVE\drivers\amdkmpfd.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [x]
S1 ccSet_NARA;NARA Settings Manager;c:\windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NARAx64\0401000.00B\ccSetx64.sys [x]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
S1 ccSet_NST;Norton Identity Safe Settings Manager;c:\windows\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NSTx64\7DD04000.00A\ccSetx64.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130913.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130913.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 Easy Launcher;Easy Launcher;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NCO;Norton Identity Safe;c:\program files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe;c:\program files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 Samsung Network Fax Server;Samsung Network Fax Server;c:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe;c:\windows\SYSNATIVE\spool\drivers\x64\3\NetFaxServer64.exe [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x]
S3 BTATH_HID;Bluetooth HID Device;c:\windows\system32\DRIVERS\btath_hid.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hid.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\System32\drivers\dc3d.sys;c:\windows\SYSNATIVE\drivers\dc3d.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 RadioHIDMini;Radio HID Mini-driver;c:\windows\System32\drivers\RadioHIDMini.sys;c:\windows\SYSNATIVE\drivers\RadioHIDMini.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-14 c:\windows\Tasks\a2zLyrics-1-codedownloader.job
- c:\program files (x86)\a2zLyrics-1\a2zLyrics-1-codedownloader.exe [2013-09-11 16:47]
.
2013-09-14 c:\windows\Tasks\a2zLyrics-1-enabler.job
- c:\program files (x86)\a2zLyrics-1\a2zLyrics-1-enabler.exe [2013-09-11 16:48]
.
2013-09-14 c:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
- c:\program files (x86)\a2zLyrics-1\a2zLyrics-1-firefoxinstaller.exe [2013-09-11 16:47]
.
2013-09-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-12 19:28]
.
2013-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-12 13:27]
.
2013-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-12 13:27]
.
2013-09-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core.job
- c:\users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-14 15:59]
.
2013-09-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001UA.job
- c:\users\Yannik\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-14 15:59]
.
2013-09-14 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16 02:54]
.
2013-09-08 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16 02:54]
.
2013-09-14 c:\windows\Tasks\Xerox PhotoCafe Communicator.job
- c:\programdata\Xerox PhotoCafe\MessageCheck.exe [2011-10-26 09:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-27 14:11 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-27 14:11 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-27 14:11 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-27 14:11 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-27 14:11 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-08-10 13191824]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-07-20 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-07-20 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-07-20 440640]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704]
"BtTray"="c:\program files (x86)\Bluetooth Suite\BtTray.exe" [2012-12-05 766080]
"BtvStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-12-05 128640]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mWindow Title =
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\
FF - ExtSQL: 2013-09-12 21:42; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
AddRemove-a2zLyrics-1 - c:\program files (x86)\a2zLyrics-1\Uninstall.exe
AddRemove-ilividtoolbargaw - c:\program files (x86)\Search Results Toolbar\Datamngr\SRToolBar\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NCO]
"ImagePath"="\"c:\program files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe\" /s \"NCO\" /m \"c:\program files (x86)\Norton Identity Safe\Engine\2013.4.0.10\diMaster.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2013-09-14 22:23:55
ComboFix-quarantined-files.txt 2013-09-14 20:23
.
Vor Suchlauf: 12 Verzeichnis(se), 644.519.194.624 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 644.487.647.232 Bytes frei
.
- - End Of File - - 83D6C7058F61A424D5A84DA2CEE9E6F6
|
|
15.09.2013, 10:26
| #6 |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsam Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 8: Bekomme sehr viel Werbung/PC langsam |
|
15.09.2013, 14:24
| #7 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsamCode:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.15.01 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16688 Yannik :: YANNIKSPC [Administrator] Schutz: Aktiviert 15.09.2013 12:52:38 mbam-log-2013-09-15 (12-52-38).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 234301 Laufzeit: 5 Minute(n), 2 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\PROGRAMDATA\Datamngr (PUP.Optional.MusicBoxToolBar.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 15 C:\Users\Yannik\downloads\iLividSetup-r0-n-bi.exe (PUP.Optional.Bandoo) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\MCPatcher_downloader_by_MCPatcher(1).exe (PUP.Optional.Somoto) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\MCPatcher_downloader_by_MCPatcher.exe (PUP.Optional.Somoto) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\PhotoScape_V3.6.5.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\SoftonicDownloader_fuer_mcedit(1).exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\SoftonicDownloader_fuer_mcedit.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\ZipOpenerSetup.exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Wincert\WIN32CERT.DLL (PUP.Optional.Datamngr.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Wincert\WIN64CERT.DLL (PUP.Optional.Datamngr.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Wincert\WIN32PROP.DLL (PUP.Optional.Datamngr.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Wincert\WIN64PROP.DLL (PUP.Optional.Datamngr.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Datamngr\COORDINATOR.CFG (PUP.Optional.MusicBoxToolBar.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Datamngr\general.cfg (PUP.Optional.MusicBoxToolBar.A) -> Keine Aktion durchgeführt. C:\PROGRAMDATA\Datamngr\S-1-5-21-2678595623-4148133582-4009595467-1001.cfg (PUP.Optional.MusicBoxToolBar.A) -> Keine Aktion durchgeführt. C:\Users\Yannik\downloads\CodecPerformerSetup.exe (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 15/09/2013 um 13:19:02
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Yannik - YANNIKSPC
# Gestartet von : C:\Users\Yannik\Downloads\adwcleaner(2).exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gefunden : C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gefunden C:\ProgramData\boost_interprocess
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16688
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [16882 octets] - [12/09/2013 21:54:30]
AdwCleaner[R1].txt - [999 octets] - [15/09/2013 13:19:02]
AdwCleaner[S0].txt - [15636 octets] - [12/09/2013 21:55:35]
########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1119 octets] ########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 8 x64
Ran by Yannik on 15.09.2013 at 14:57:27,07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\SweetIM
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422152254}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455155554}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466156654}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444154454}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422152254}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455155554}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466156654}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444154454}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455155554}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466156654}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444154454}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455155554}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466156654}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444154454}
~~~ Files
Failed to delete: [File] C:\windows\Tasks\a2zLyrics-1-codedownloader.job
Failed to delete: [File] C:\windows\Tasks\a2zLyrics-1-enabler.job
Failed to delete: [File] C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
~~~ Folders
Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Failed to delete: [Folder] "C:\ProgramData\datamngr"
Failed to delete: [Folder] "C:\ProgramData\wincert"
Failed to delete: [Folder] "C:\Program Files (x86)\a2zlyrics-1"
~~~ FireFox
Successfully deleted the following from C:\Users\Yannik\AppData\Roaming\mozilla\firefox\profiles\b1bcz5lc.default\prefs.js
user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v1");
user_pref("iminent.webbooster.scripts.minibar.LayoutId", "28");
user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent101", "1374267757970");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1374393083811");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent109", "1374088150785");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent111", "1374088150794");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent122", "1374088150802");
user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1374267790389");
user_pref("iminent.webbooster.scripts.sslminibar.FavLinkSplitTestingClass", "v2");
user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "28");
user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1374393079590");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1374319501212");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent110", "1373574138757");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1374319501222");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1374319508971");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1374319501229");
user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1372353208114");
Emptied folder: C:\Users\Yannik\AppData\Roaming\mozilla\firefox\profiles\b1bcz5lc.default\minidumps [6 files]
~~~ Chrome
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\extensioninstallforcelist [Blacklisted Policy]
Successfully deleted: [Folder] C:\Users\Yannik\appdata\local\Google\Chrome\User Data\Default\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.09.2013 at 15:08:38,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter 2013-09-15 12:46 - 2013-09-15 12:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yannik\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-15 12:43 - 2012-09-18 13:15 - 00000360 _____ C:\windows\Tasks\Xerox PhotoCafe Communicator.job
2013-09-15 12:37 - 2013-08-12 15:27 - 00001130 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-15 10:50 - 2012-09-18 12:55 - 00000870 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-14 22:24 - 2013-09-14 21:12 - 00000000 ____D C:\Qoobox
2013-09-14 22:23 - 2013-09-14 22:23 - 00019096 _____ C:\ComboFix.txt
2013-09-14 22:23 - 2012-09-18 13:01 - 00000000 ____D C:\Users\EasySurvey
2013-09-14 22:23 - 2012-07-26 07:37 - 00000000 __RHD C:\Users\Default
2013-09-14 22:21 - 2013-09-14 21:12 - 00000000 ____D C:\windows\erdnt
2013-09-14 22:20 - 2012-07-26 07:26 - 00000215 _____ C:\windows\system.ini
2013-09-14 21:11 - 2013-09-14 21:11 - 05126233 ____R (Swearware) C:\Users\Yannik\Downloads\ComboFix.exe
2013-09-14 18:46 - 2013-09-11 18:46 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-14 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\NDF
2013-09-14 09:30 - 2013-09-12 21:57 - 00331696 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-13 23:03 - 2013-09-13 23:03 - 00060736 _____ C:\Users\Yannik\Downloads\FRST.txt
2013-09-13 23:03 - 2013-09-13 23:02 - 00050846 _____ C:\Users\Yannik\Downloads\Addition.txt
2013-09-13 23:01 - 2013-09-13 23:01 - 00000000 ____D C:\FRST
2013-09-13 22:07 - 2013-09-13 21:29 - 00000474 _____ C:\Users\Yannik\Downloads\defogger_disable.log
2013-09-13 21:57 - 2013-09-13 21:57 - 00001296 _____ C:\Users\Yannik\Desktop\Gmer.log
2013-09-13 21:35 - 2013-09-13 21:35 - 00377856 _____ C:\Users\Yannik\Downloads\gmer_2.1.19163.exe
2013-09-13 21:33 - 2013-09-13 21:31 - 01949768 _____ (Farbar) C:\Users\Yannik\Downloads\FRST64.exe
2013-09-13 21:29 - 2013-09-13 21:29 - 00000000 _____ C:\Users\Yannik\defogger_reenable
2013-09-13 21:29 - 2013-05-06 21:39 - 00000000 ____D C:\Users\Yannik
2013-09-13 21:06 - 2013-05-12 18:39 - 00000000 ____D C:\Users\Yannik\Desktop\Yannik
2013-09-13 20:46 - 2013-09-13 20:46 - 00050477 _____ C:\Users\Yannik\Downloads\Defogger.exe
2013-09-13 19:58 - 2013-09-13 19:54 - 00008908 _____ C:\Users\Yannik\Downloads\hijackthis.log
2013-09-13 19:53 - 2013-09-13 19:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\Yannik\Downloads\HiJackThis204.exe
2013-09-13 19:51 - 2013-05-06 21:42 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 19:50 - 2013-09-13 19:50 - 00001102 _____ C:\Users\Yannik\Desktop\Browser Hijack Recover(BHR).lnk
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 ____D C:\Program Files (x86)\Browser Hijack Recover
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 _____ C:\windows\SysWOW64\8104297.jun
2013-09-13 19:50 - 2013-09-13 19:49 - 02416480 _____ (Wamasoft,Inc. ) C:\Users\Yannik\Downloads\bhr22.exe
2013-09-13 19:32 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Yannik\Desktop\Schule
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:04 - 2013-09-13 19:04 - 00002639 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-09-13 19:04 - 2013-09-13 19:04 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 19:04 - 2013-09-13 19:03 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-09-13 16:36 - 2013-09-13 16:04 - 215056384 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86(1).msi
2013-09-13 15:58 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-09-13 15:44 - 2013-09-13 15:21 - 161012010 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi.part
2013-09-13 15:21 - 2013-09-13 15:21 - 00000000 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi
2013-09-12 21:59 - 2013-09-12 21:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-12 21:55 - 2013-06-12 17:08 - 00000000 ____D C:\ProgramData\Datamngr
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner.exe
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner(1).exe
2013-09-12 21:28 - 2013-09-12 21:28 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 21:28 - 2013-05-08 21:20 - 00000000 ____D C:\Users\Yannik\AppData\Local\Adobe
2013-09-12 13:53 - 2013-05-07 18:53 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\.minecraft
2013-09-12 13:51 - 2013-09-11 14:52 - 00352256 _____ C:\Users\Yannik\Desktop\MinecraftNew.exe
2013-09-12 13:33 - 2013-08-13 14:45 - 00000000 ____D C:\windows\system32\MRT
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\WinStore
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\PolicyDefinitions
2013-09-12 13:33 - 2012-07-26 07:38 - 00000000 ____D C:\windows\system32\oobe
2013-09-12 13:30 - 2013-05-07 18:31 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-11 21:14 - 2013-09-11 21:11 - 20838036 _____ C:\Users\Yannik\Downloads\Soartex_Fanver.zip
2013-09-11 19:00 - 2013-09-11 18:58 - 15536386 _____ C:\Users\Yannik\Downloads\LB Photo Realism x64.zip
2013-09-11 18:48 - 2013-09-11 18:48 - 00004220 _____ C:\windows\System32\Tasks\a2zLyrics-1-codedownloader
2013-09-11 18:48 - 2013-09-11 18:48 - 00004120 _____ C:\windows\System32\Tasks\a2zLyrics-1-enabler
2013-09-11 18:45 - 2013-09-11 18:45 - 00166672 _____ () C:\Users\Yannik\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe
2013-09-11 18:15 - 2013-09-11 18:13 - 02069917 _____ C:\Users\Yannik\Downloads\minecraftforge-installer-1.6.2-9.10.1.859.jar
2013-09-11 18:12 - 2013-09-11 18:12 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4(1).jar
2013-09-11 16:38 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-09-11 15:13 - 2013-09-11 15:13 - 00103736 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-10 18:46 - 2013-09-10 18:46 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4.jar
2013-09-05 22:16 - 2013-08-04 23:18 - 00000000 ____D C:\Users\Yannik\Desktop\MENORCA
2013-09-05 22:09 - 2013-09-12 13:37 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-05 22:09 - 2013-09-12 13:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-04 22:17 - 2013-06-14 18:05 - 00002376 _____ C:\Users\Yannik\Desktop\Google Chrome.lnk
2013-09-04 00:50 - 2013-09-04 00:50 - 00736161 _____ C:\Users\Yannik\Downloads\MiFileExplorer_v3.1.6_light_orange_build_201303072.zip
2013-09-04 00:14 - 2013-06-14 17:59 - 00001092 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core.job
2013-09-03 23:59 - 2013-09-03 23:59 - 00000000 ____D C:\output
2013-08-27 15:13 - 2013-05-06 21:50 - 00000000 ____D C:\Users\Yannik\Desktop\Ordner
2013-08-21 15:11 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2013-08-21 09:39 - 2013-05-06 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-21 06:12 - 2013-09-11 13:44 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-21 06:12 - 2013-09-11 13:44 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-21 06:11 - 2013-09-11 13:45 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-21 04:34 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-21 04:06 - 2013-09-11 13:44 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-21 03:43 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-21 01:52 - 2013-09-11 13:44 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-08-20 11:42 - 2013-05-06 21:42 - 00000000 ____D C:\Users\Yannik\AppData\Local\Samsung
2013-08-20 11:42 - 2012-09-18 13:00 - 00000000 ____D C:\ProgramData\SAMSUNG
2013-08-20 11:42 - 2012-09-18 12:12 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-08-17 21:41 - 2013-08-17 21:41 - 00002228 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-17 21:41 - 2013-08-12 15:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-17 21:41 - 2013-06-14 17:59 - 00000000 ____D C:\Users\Yannik\AppData\Local\Google
2013-08-17 21:36 - 2013-08-17 21:32 - 25415728 _____ C:\Users\Yannik\Downloads\GoogleEarth1888Win.exe
2013-08-17 19:13 - 2013-08-17 19:13 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-17 19:13 - 2013-07-18 15:45 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-08-17 13:26 - 2013-08-17 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 09:14 - 2013-08-17 09:13 - 00001944 _____ C:\{CAD1E1EC-B11D-42B1-9A8E-F8CBF25FE9A4}
2013-08-17 09:12 - 2013-08-17 09:12 - 00001920 _____ C:\{79C416D4-1DBE-4FC7-85E1-1FF5F6A5C6DE}
2013-08-16 07:41 - 2013-09-11 13:46 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-08-16 07:39 - 2013-09-11 13:46 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-08-16 07:39 - 2013-09-11 13:46 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-08-16 07:32 - 2013-09-11 13:46 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-08-16 07:21 - 2013-09-11 13:46 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-08-16 07:20 - 2013-09-11 13:46 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-08-16 00:43 - 2013-09-11 13:46 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-09 15:09
==================== End Of Log ============================
|
|
15.09.2013, 16:13
| #8 |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsamESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.09.2013, 19:24
| #9 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsamCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=20f33ba2bcb9e74d95346bf04eb20be4
# engine=15141
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-15 05:46:53
# local_time=2013-09-15 07:46:53 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=3591 16777213 100 91 2196383 141863798 0 0
# compatibility_mode=5893 16776574 100 94 2196545 38773324 0 0
# scanned=211554
# found=0
# cleaned=0
# scan_time=7730
Code:
ATTFilter Results of screen317's Security Check version 0.99.73 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Norton Internet Security Online WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 21 Java version out of Date! Adobe Flash Player 11.8.800.168 Adobe Reader 10.1.3 Adobe Reader out of Date! Mozilla Firefox (23.0.1) Google Chrome 29.0.1547.62 Google Chrome 29.0.1547.66 ````````Process Check: objlist.exe by Laurent```````` Norton ccSvcHst.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe Symantec Norton Online Backup NOBuAgent.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-09-2013 05
Ran by Yannik (administrator) on YANNIKSPC on 15-09-2013 20:19:58
Running from C:\Users\Yannik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H5CT1QRB
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
() C:\windows\SysWOW64\PnkBstrA.exe
(Samsung Electronics Co., Ltd.) C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) \\?\C:\windows\system32\wbem\WMIADAP.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoBandCustomize] 0
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\Explorer: [NoBandCustomize] 0
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/windows/ie_intl/en/start/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
SearchScopes: HKLM - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL =
SearchScopes: HKCU - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Yannik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Yannik\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com
FF Extension: Search-Results Toolbar - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}.xpi
FF Extension: No Name - C:\Users\Yannik\AppData\Roaming\Mozilla\Firefox\Profiles\b1bcz5lc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2013.4.0.10\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (a2zLyrics-1) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.24.11_0
CHR Extension: (Google Docs) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Norton Identity Protection) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Gmail) - C:\Users\Yannik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-11] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-18] ()
R2 Samsung Network Fax Server; C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [237056 2012-04-26] (Samsung Electronics Co., Ltd.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3017776 2013-07-12] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-05-13] (BlueStack Systems)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222360 2012-12-05] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-05] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130913.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130913.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130914.005\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130914.005\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130914.005\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130914.005\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-11] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-15 19:57 - 2013-09-15 19:58 - 00891144 _____ C:\Users\Yannik\Downloads\SecurityCheck.exe
2013-09-15 17:30 - 2013-09-15 17:30 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-15 17:29 - 2013-09-15 17:30 - 02347384 _____ (ESET) C:\Users\Yannik\Downloads\esetsmartinstaller_enu.exe
2013-09-15 15:08 - 2013-09-15 15:08 - 00006220 _____ C:\Users\Yannik\Desktop\JRT.txt
2013-09-15 14:57 - 2013-09-15 14:57 - 00000000 ____D C:\windows\ERUNT
2013-09-15 14:56 - 2013-09-15 14:56 - 01029675 _____ (Thisisu) C:\Users\Yannik\Downloads\JRT.exe
2013-09-15 13:18 - 2013-09-15 13:18 - 01039554 _____ C:\Users\Yannik\Downloads\adwcleaner(2).exe
2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-15 12:47 - 2013-09-15 12:47 - 00001123 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\Malwarebytes
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-15 12:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-15 12:45 - 2013-09-15 12:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yannik\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-14 22:23 - 2013-09-14 22:23 - 00019096 _____ C:\ComboFix.txt
2013-09-14 21:15 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-09-14 21:15 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-09-14 21:15 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\windows\SWXCACLS.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-09-14 21:15 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-09-14 21:12 - 2013-09-14 22:24 - 00000000 ____D C:\Qoobox
2013-09-14 21:12 - 2013-09-14 22:21 - 00000000 ____D C:\windows\erdnt
2013-09-14 21:11 - 2013-09-14 21:11 - 05126233 ____R (Swearware) C:\Users\Yannik\Downloads\ComboFix.exe
2013-09-13 23:03 - 2013-09-13 23:03 - 00060736 _____ C:\Users\Yannik\Downloads\FRST.txt
2013-09-13 23:02 - 2013-09-13 23:03 - 00050846 _____ C:\Users\Yannik\Downloads\Addition.txt
2013-09-13 23:01 - 2013-09-13 23:01 - 00000000 ____D C:\FRST
2013-09-13 21:57 - 2013-09-13 21:57 - 00001296 _____ C:\Users\Yannik\Desktop\Gmer.log
2013-09-13 21:49 - 2013-09-15 19:55 - 00012884 _____ C:\Users\Yannik\Desktop\Unbenannt 1.odt
2013-09-13 21:35 - 2013-09-13 21:35 - 00377856 _____ C:\Users\Yannik\Downloads\gmer_2.1.19163.exe
2013-09-13 21:29 - 2013-09-13 22:07 - 00000474 _____ C:\Users\Yannik\Downloads\defogger_disable.log
2013-09-13 21:29 - 2013-09-13 21:29 - 00000000 _____ C:\Users\Yannik\defogger_reenable
2013-09-13 20:46 - 2013-09-13 20:46 - 00050477 _____ C:\Users\Yannik\Downloads\Defogger.exe
2013-09-13 19:54 - 2013-09-13 19:58 - 00008908 _____ C:\Users\Yannik\Downloads\hijackthis.log
2013-09-13 19:53 - 2013-09-13 19:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\Yannik\Downloads\HiJackThis204.exe
2013-09-13 19:50 - 2013-09-13 19:50 - 00001102 _____ C:\Users\Yannik\Desktop\Browser Hijack Recover(BHR).lnk
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 ____D C:\Program Files (x86)\Browser Hijack Recover
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 _____ C:\windows\SysWOW64\8104297.jun
2013-09-13 19:49 - 2013-09-13 19:50 - 02416480 _____ (Wamasoft,Inc. ) C:\Users\Yannik\Downloads\bhr22.exe
2013-09-13 19:06 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Yannik\Desktop\Schule
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:04 - 2013-09-13 19:04 - 00002639 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-09-13 19:04 - 2013-09-13 19:04 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 19:03 - 2013-09-13 19:04 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-09-13 16:04 - 2013-09-13 16:36 - 215056384 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86(1).msi
2013-09-13 15:21 - 2013-09-13 15:44 - 161012010 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi.part
2013-09-13 15:21 - 2013-09-13 15:21 - 00000000 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi
2013-09-12 21:59 - 2013-09-12 21:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-12 21:57 - 2013-09-14 09:30 - 00331696 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-12 21:53 - 2013-09-15 13:19 - 00000000 ____D C:\AdwCleaner
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner.exe
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner(1).exe
2013-09-12 21:28 - 2013-09-15 20:20 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 21:28 - 2013-09-12 21:28 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 13:37 - 2013-09-05 22:09 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-12 13:37 - 2013-09-05 22:09 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 21:11 - 2013-09-11 21:14 - 20838036 _____ C:\Users\Yannik\Downloads\Soartex_Fanver.zip
2013-09-11 21:01 - 2010-10-21 02:00 - 00695296 _____ (AnjoCaido) C:\Users\Yannik\Desktop\MinecraftSP.exe
2013-09-11 18:58 - 2013-09-11 19:00 - 15536386 _____ C:\Users\Yannik\Downloads\LB Photo Realism x64.zip
2013-09-11 18:48 - 2013-09-15 18:48 - 00001216 _____ C:\windows\Tasks\a2zLyrics-1-codedownloader.job
2013-09-11 18:48 - 2013-09-15 18:48 - 00001116 _____ C:\windows\Tasks\a2zLyrics-1-enabler.job
2013-09-11 18:48 - 2013-09-11 18:48 - 00004220 _____ C:\windows\System32\Tasks\a2zLyrics-1-codedownloader
2013-09-11 18:48 - 2013-09-11 18:48 - 00004120 _____ C:\windows\System32\Tasks\a2zLyrics-1-enabler
2013-09-11 18:47 - 2013-09-15 18:52 - 00001848 _____ C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
2013-09-11 18:46 - 2013-09-14 18:46 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-11 18:45 - 2013-09-11 18:45 - 00166672 _____ () C:\Users\Yannik\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe
2013-09-11 18:13 - 2013-09-11 18:15 - 02069917 _____ C:\Users\Yannik\Downloads\minecraftforge-installer-1.6.2-9.10.1.859.jar
2013-09-11 18:12 - 2013-09-11 18:12 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4(1).jar
2013-09-11 17:59 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll
2013-09-11 15:13 - 2013-09-11 15:13 - 00103736 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-11 14:52 - 2013-09-12 13:51 - 00352256 _____ C:\Users\Yannik\Desktop\MinecraftNew.exe
2013-09-11 13:46 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-09-11 13:46 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-09-11 13:46 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-09-11 13:46 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-09-11 13:46 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-09-11 13:46 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-09-11 13:46 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-09-11 13:46 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-09-11 13:46 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-09-11 13:46 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-09-11 13:46 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-09-11 13:46 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-09-11 13:46 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
2013-09-11 13:45 - 2013-08-21 06:11 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-11 13:44 - 2013-08-21 06:12 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-11 13:44 - 2013-08-21 06:12 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-11 13:44 - 2013-08-21 06:11 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-11 13:44 - 2013-08-21 06:11 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-11 13:44 - 2013-08-21 04:34 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-11 13:44 - 2013-08-21 04:06 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-11 13:44 - 2013-08-21 04:06 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-11 13:44 - 2013-08-21 04:06 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-11 13:44 - 2013-08-21 04:05 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-11 13:44 - 2013-08-21 03:43 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-11 13:44 - 2013-08-21 01:52 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-09-11 13:43 - 2013-08-03 06:30 - 04038144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-11 13:43 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2013-09-11 13:43 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2013-09-11 13:43 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2013-09-11 13:43 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\windows\SysWOW64\LocationApi.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2013-09-11 13:43 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Wwanadvui.dll
2013-09-11 13:43 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\windows\system32\LocationApi.dll
2013-09-11 13:43 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2013-09-11 13:43 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2013-09-11 13:43 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-11 13:43 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2013-09-11 13:43 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-09-11 13:43 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2013-09-11 13:43 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-11 13:43 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2013-09-11 13:43 - 2013-07-02 00:08 - 00387583 _____ C:\windows\system32\ApnDatabase.xml
2013-09-11 13:43 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\windows\SysWOW64\openfiles.exe
2013-09-11 13:43 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\openfiles.exe
2013-09-11 13:43 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2013-09-11 13:43 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2013-09-11 13:43 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2013-09-11 13:43 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-09-11 13:43 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys
2013-09-11 13:43 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys
2013-09-11 13:43 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2013-09-11 13:43 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\wcmsvc.dll
2013-09-11 13:43 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2013-09-11 13:43 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2013-09-11 13:43 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2013-09-11 13:43 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2013-09-11 13:43 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2013-09-11 13:43 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinSCard.dll
2013-09-11 13:43 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll
2013-09-11 13:43 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys
2013-09-11 13:43 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-09-11 13:43 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-09-11 13:43 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2013-09-11 13:43 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-09-11 13:43 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-09-11 13:43 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-09-11 13:43 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2013-09-10 18:46 - 2013-09-10 18:46 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4.jar
2013-09-04 00:50 - 2013-09-04 00:50 - 00736161 _____ C:\Users\Yannik\Downloads\MiFileExplorer_v3.1.6_light_orange_build_201303072.zip
2013-09-03 23:59 - 2013-09-03 23:59 - 00000000 ____D C:\output
2013-08-17 21:41 - 2013-08-17 21:41 - 00002228 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-17 21:32 - 2013-08-17 21:36 - 25415728 _____ C:\Users\Yannik\Downloads\GoogleEarth1888Win.exe
2013-08-17 19:13 - 2013-08-17 19:13 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-17 13:25 - 2013-08-17 13:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 09:13 - 2013-08-17 09:14 - 00001944 _____ C:\{CAD1E1EC-B11D-42B1-9A8E-F8CBF25FE9A4}
2013-08-17 09:12 - 2013-08-17 09:12 - 00001920 _____ C:\{79C416D4-1DBE-4FC7-85E1-1FF5F6A5C6DE}
==================== One Month Modified Files and Folders =======
2013-09-15 20:20 - 2013-09-12 21:28 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-15 20:02 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-09-15 19:58 - 2013-09-15 19:57 - 00891144 _____ C:\Users\Yannik\Downloads\SecurityCheck.exe
2013-09-15 19:55 - 2013-09-13 21:49 - 00012884 _____ C:\Users\Yannik\Desktop\Unbenannt 1.odt
2013-09-15 19:55 - 2013-05-21 18:55 - 00072192 ___SH C:\Users\Yannik\Desktop\Thumbs.db
2013-09-15 19:43 - 2012-09-18 13:15 - 00000360 _____ C:\windows\Tasks\Xerox PhotoCafe Communicator.job
2013-09-15 19:37 - 2013-08-12 15:27 - 00001130 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-15 19:14 - 2013-06-14 17:59 - 00001144 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001UA.job
2013-09-15 18:52 - 2013-09-11 18:47 - 00001848 _____ C:\windows\Tasks\a2zLyrics-1-firefoxinstaller.job
2013-09-15 18:48 - 2013-09-11 18:48 - 00001216 _____ C:\windows\Tasks\a2zLyrics-1-codedownloader.job
2013-09-15 18:48 - 2013-09-11 18:48 - 00001116 _____ C:\windows\Tasks\a2zLyrics-1-enabler.job
2013-09-15 17:30 - 2013-09-15 17:30 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-15 17:30 - 2013-09-15 17:29 - 02347384 _____ (ESET) C:\Users\Yannik\Downloads\esetsmartinstaller_enu.exe
2013-09-15 17:29 - 2012-09-19 03:58 - 00754172 _____ C:\windows\system32\perfh007.dat
2013-09-15 17:29 - 2012-09-19 03:58 - 00156362 _____ C:\windows\system32\perfc007.dat
2013-09-15 17:29 - 2012-07-26 09:28 - 01748838 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-15 15:37 - 2013-08-12 15:27 - 00001126 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-15 15:08 - 2013-09-15 15:08 - 00006220 _____ C:\Users\Yannik\Desktop\JRT.txt
2013-09-15 15:06 - 2013-05-06 21:50 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001
2013-09-15 14:58 - 2012-09-18 12:12 - 01786430 _____ C:\windows\WindowsUpdate.log
2013-09-15 14:57 - 2013-09-15 14:57 - 00000000 ____D C:\windows\ERUNT
2013-09-15 14:56 - 2013-09-15 14:56 - 01029675 _____ (Thisisu) C:\Users\Yannik\Downloads\JRT.exe
2013-09-15 13:19 - 2013-09-12 21:53 - 00000000 ____D C:\AdwCleaner
2013-09-15 13:18 - 2013-09-15 13:18 - 01039554 _____ C:\Users\Yannik\Downloads\adwcleaner(2).exe
2013-09-15 13:01 - 2013-09-15 13:01 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-15 13:00 - 2012-09-18 12:55 - 00000868 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-09-15 13:00 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-15 12:59 - 2012-08-05 23:07 - 01268282 _____ C:\windows\PFRO.log
2013-09-15 12:59 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-09-15 12:47 - 2013-09-15 12:47 - 00001123 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\Malwarebytes
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-15 12:47 - 2013-09-15 12:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-15 12:46 - 2013-09-15 12:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Yannik\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-15 10:50 - 2012-09-18 12:55 - 00000870 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-09-14 22:24 - 2013-09-14 21:12 - 00000000 ____D C:\Qoobox
2013-09-14 22:23 - 2013-09-14 22:23 - 00019096 _____ C:\ComboFix.txt
2013-09-14 22:23 - 2012-09-18 13:01 - 00000000 ____D C:\Users\EasySurvey
2013-09-14 22:23 - 2012-07-26 07:37 - 00000000 __RHD C:\Users\Default
2013-09-14 22:21 - 2013-09-14 21:12 - 00000000 ____D C:\windows\erdnt
2013-09-14 22:20 - 2012-07-26 07:26 - 00000215 _____ C:\windows\system.ini
2013-09-14 21:11 - 2013-09-14 21:11 - 05126233 ____R (Swearware) C:\Users\Yannik\Downloads\ComboFix.exe
2013-09-14 18:46 - 2013-09-11 18:46 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-1
2013-09-14 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\NDF
2013-09-14 09:30 - 2013-09-12 21:57 - 00331696 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-13 23:03 - 2013-09-13 23:03 - 00060736 _____ C:\Users\Yannik\Downloads\FRST.txt
2013-09-13 23:03 - 2013-09-13 23:02 - 00050846 _____ C:\Users\Yannik\Downloads\Addition.txt
2013-09-13 23:01 - 2013-09-13 23:01 - 00000000 ____D C:\FRST
2013-09-13 22:07 - 2013-09-13 21:29 - 00000474 _____ C:\Users\Yannik\Downloads\defogger_disable.log
2013-09-13 21:57 - 2013-09-13 21:57 - 00001296 _____ C:\Users\Yannik\Desktop\Gmer.log
2013-09-13 21:35 - 2013-09-13 21:35 - 00377856 _____ C:\Users\Yannik\Downloads\gmer_2.1.19163.exe
2013-09-13 21:29 - 2013-09-13 21:29 - 00000000 _____ C:\Users\Yannik\defogger_reenable
2013-09-13 21:29 - 2013-05-06 21:39 - 00000000 ____D C:\Users\Yannik
2013-09-13 21:06 - 2013-05-12 18:39 - 00000000 ____D C:\Users\Yannik\Desktop\Yannik
2013-09-13 20:46 - 2013-09-13 20:46 - 00050477 _____ C:\Users\Yannik\Downloads\Defogger.exe
2013-09-13 19:58 - 2013-09-13 19:54 - 00008908 _____ C:\Users\Yannik\Downloads\hijackthis.log
2013-09-13 19:53 - 2013-09-13 19:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\Yannik\Downloads\HiJackThis204.exe
2013-09-13 19:51 - 2013-05-06 21:42 - 00000000 ___RD C:\Users\Yannik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 19:50 - 2013-09-13 19:50 - 00001102 _____ C:\Users\Yannik\Desktop\Browser Hijack Recover(BHR).lnk
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 ____D C:\Program Files (x86)\Browser Hijack Recover
2013-09-13 19:50 - 2013-09-13 19:50 - 00000000 _____ C:\windows\SysWOW64\8104297.jun
2013-09-13 19:50 - 2013-09-13 19:49 - 02416480 _____ (Wamasoft,Inc. ) C:\Users\Yannik\Downloads\bhr22.exe
2013-09-13 19:32 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Yannik\Desktop\Schule
2013-09-13 19:06 - 2013-09-13 19:06 - 00000000 ____D C:\Users\Public\Documents\sun
2013-09-13 19:04 - 2013-09-13 19:04 - 00002639 _____ C:\Users\Public\Desktop\LibreOffice 4.1.lnk
2013-09-13 19:04 - 2013-09-13 19:04 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\LibreOffice
2013-09-13 19:04 - 2013-09-13 19:03 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-09-13 16:36 - 2013-09-13 16:04 - 215056384 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86(1).msi
2013-09-13 15:58 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-09-13 15:44 - 2013-09-13 15:21 - 161012010 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi.part
2013-09-13 15:21 - 2013-09-13 15:21 - 00000000 _____ C:\Users\Yannik\Downloads\LibreOffice_4.1.1_Win_x86.msi
2013-09-12 21:59 - 2013-09-12 21:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-12 21:55 - 2013-06-12 17:08 - 00000000 ____D C:\ProgramData\Datamngr
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner.exe
2013-09-12 21:53 - 2013-09-12 21:53 - 01037278 _____ C:\Users\Yannik\Downloads\adwcleaner(1).exe
2013-09-12 21:28 - 2013-09-12 21:28 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 21:28 - 2013-05-08 21:20 - 00000000 ____D C:\Users\Yannik\AppData\Local\Adobe
2013-09-12 13:53 - 2013-05-07 18:53 - 00000000 ____D C:\Users\Yannik\AppData\Roaming\.minecraft
2013-09-12 13:51 - 2013-09-11 14:52 - 00352256 _____ C:\Users\Yannik\Desktop\MinecraftNew.exe
2013-09-12 13:33 - 2013-08-13 14:45 - 00000000 ____D C:\windows\system32\MRT
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\WinStore
2013-09-12 13:33 - 2012-07-26 10:12 - 00000000 ____D C:\windows\PolicyDefinitions
2013-09-12 13:33 - 2012-07-26 07:38 - 00000000 ____D C:\windows\system32\oobe
2013-09-12 13:30 - 2013-05-07 18:31 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-11 21:14 - 2013-09-11 21:11 - 20838036 _____ C:\Users\Yannik\Downloads\Soartex_Fanver.zip
2013-09-11 19:00 - 2013-09-11 18:58 - 15536386 _____ C:\Users\Yannik\Downloads\LB Photo Realism x64.zip
2013-09-11 18:48 - 2013-09-11 18:48 - 00004220 _____ C:\windows\System32\Tasks\a2zLyrics-1-codedownloader
2013-09-11 18:48 - 2013-09-11 18:48 - 00004120 _____ C:\windows\System32\Tasks\a2zLyrics-1-enabler
2013-09-11 18:45 - 2013-09-11 18:45 - 00166672 _____ () C:\Users\Yannik\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe
2013-09-11 18:15 - 2013-09-11 18:13 - 02069917 _____ C:\Users\Yannik\Downloads\minecraftforge-installer-1.6.2-9.10.1.859.jar
2013-09-11 18:12 - 2013-09-11 18:12 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4(1).jar
2013-09-11 16:38 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-09-11 15:13 - 2013-09-11 15:13 - 00103736 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-09-10 18:46 - 2013-09-10 18:46 - 00396525 _____ C:\Users\Yannik\Downloads\OptiFine_1.6.2_HD_C4.jar
2013-09-05 22:16 - 2013-08-04 23:18 - 00000000 ____D C:\Users\Yannik\Desktop\MENORCA
2013-09-05 22:09 - 2013-09-12 13:37 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-05 22:09 - 2013-09-12 13:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-04 22:17 - 2013-06-14 18:05 - 00002376 _____ C:\Users\Yannik\Desktop\Google Chrome.lnk
2013-09-04 00:50 - 2013-09-04 00:50 - 00736161 _____ C:\Users\Yannik\Downloads\MiFileExplorer_v3.1.6_light_orange_build_201303072.zip
2013-09-04 00:14 - 2013-06-14 17:59 - 00001092 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678595623-4148133582-4009595467-1001Core.job
2013-09-03 23:59 - 2013-09-03 23:59 - 00000000 ____D C:\output
2013-08-27 15:13 - 2013-05-06 21:50 - 00000000 ____D C:\Users\Yannik\Desktop\Ordner
2013-08-21 15:11 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2013-08-21 09:39 - 2013-05-06 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 09:37 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-21 06:12 - 2013-09-11 13:44 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-21 06:12 - 2013-09-11 13:44 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-21 06:11 - 2013-09-11 13:45 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-21 06:11 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-21 04:34 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-21 04:06 - 2013-09-11 13:44 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-21 04:06 - 2013-09-11 13:44 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-21 04:05 - 2013-09-11 13:44 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-21 03:43 - 2013-09-11 13:44 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-21 01:52 - 2013-09-11 13:44 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-08-20 11:42 - 2013-05-06 21:42 - 00000000 ____D C:\Users\Yannik\AppData\Local\Samsung
2013-08-20 11:42 - 2012-09-18 13:00 - 00000000 ____D C:\ProgramData\SAMSUNG
2013-08-20 11:42 - 2012-09-18 12:12 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-08-17 21:41 - 2013-08-17 21:41 - 00002228 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-17 21:41 - 2013-08-12 15:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-17 21:41 - 2013-06-14 17:59 - 00000000 ____D C:\Users\Yannik\AppData\Local\Google
2013-08-17 21:36 - 2013-08-17 21:32 - 25415728 _____ C:\Users\Yannik\Downloads\GoogleEarth1888Win.exe
2013-08-17 19:13 - 2013-08-17 19:13 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-17 19:13 - 2013-07-18 15:45 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-08-17 13:26 - 2013-08-17 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 09:14 - 2013-08-17 09:13 - 00001944 _____ C:\{CAD1E1EC-B11D-42B1-9A8E-F8CBF25FE9A4}
2013-08-17 09:12 - 2013-08-17 09:12 - 00001920 _____ C:\{79C416D4-1DBE-4FC7-85E1-1FF5F6A5C6DE}
2013-08-16 07:41 - 2013-09-11 13:46 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-08-16 07:39 - 2013-09-11 13:46 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-08-16 07:39 - 2013-09-11 13:46 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-08-16 07:32 - 2013-09-11 13:46 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-08-16 07:22 - 2013-09-11 13:46 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-08-16 07:21 - 2013-09-11 13:46 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-08-16 07:21 - 2013-09-11 13:46 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-08-16 07:20 - 2013-09-11 13:46 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-08-16 00:43 - 2013-09-11 13:46 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-08-16 00:43 - 2013-09-11 13:46 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-08-16 00:42 - 2013-09-11 13:46 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-09 15:09
==================== End Of Log ============================
--- --- --- |
|
16.09.2013, 09:47
| #10 |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsam Java und Adobe updaten. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.09.2013, 18:31
| #11 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsam Erstmal vielen Dank für die Hilfe!! Nur leider - das Problem ist immer noch da.  Die Links, pob-ups und die vom Add-On geblockte Werbung sind immer noch zu sehen. Hab ich irgend was falsch gemacht? |
|
16.09.2013, 20:24
| #12 |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsam Warum frage ich immer ob es noch Probleme gibt und die Frage wird ignoriert? In welchem Browser?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.09.2013, 20:50
| #13 |
| | Windows 8: Bekomme sehr viel Werbung/PC langsam Doch kein Problem Jetzt, nach nem Neustart, ist alles wieder beim Alten. Keine Werbung mehr - super!!!Danke nochmal. |
|
17.09.2013, 08:11
| #14 |
| /// the machine /// TB-Ausbilder | Windows 8: Bekomme sehr viel Werbung/PC langsam öhm, ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 8: Bekomme sehr viel Werbung/PC langsam |
| adware.installbrain, appdata, autostart, csrss.exe, explorer.exe, gebraucht, harddisk, langsam, pup.optional.bandoo, pup.optional.datamngr.a, pup.optional.installcore, pup.optional.musicboxtoolbar.a, pup.optional.opencandy, pup.optional.softonic, pup.optional.somoto, spiele, system32, viel werbung, werbung, win32k.sys |
Linear-Darstellung
