|
Plagegeister aller Art und deren Bekämpfung: Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
10.10.2013, 08:46 | #16 |
/// the machine /// TB-Ausbilder | Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Bei Delfix Download vielleicht Werbung angeklickt? In welchem Browser?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.10.2013, 09:01 | #17 |
| Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Ja ich hab ein Häkchen angeklickt:
__________________Entfernen der Reinigungsprogramme im Mozialla Firefox!! LG |
10.10.2013, 09:14 | #18 |
/// the machine /// TB-Ausbilder | Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Revo Uninstaller - Download - Filepony
__________________damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Frisches FRST log bitte.
__________________ |
11.10.2013, 08:33 | #19 |
| Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Caroline (administrator) on CARO on 11-10-2013 09:28:03 Running from C:\Users\Caroline\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\windows\system32\atiesrxx.exe (AMD) C:\windows\system32\atieclxx.exe () C:\Windows\System32\GFNEXSrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (TOSHIBA Corporation) C:\windows\system32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Caroline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Dropbox, Inc.) C:\Users\Caroline\AppData\Roaming\Dropbox\bin\Dropbox.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeBtMng.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvProvider.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\klwtblfs.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoUpdateCheck.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [] - [x] HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2012-03-16] (Realtek Semiconductor) HKLM\...\Run: [SRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip [223180 2012-03-22] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2866960 2011-12-19] (Synaptics Incorporated) HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [590256 2011-09-23] (TOSHIBA Corporation) HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [989056 2011-12-14] (TOSHIBA Corporation) HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1548208 2011-11-24] (TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-12-15] (TOSHIBA Corporation) HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-11-26] (TOSHIBA Corporation) HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH) HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2012-05-10] (Toshiba Europe GmbH) HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation) HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Caroline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1199576 2012-12-28] (Spotify Ltd) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [Pokki] - C:\windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\LaunchDeskband.dll",RunLaunchDeskband HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-10] (Google Inc.) HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony) MountPoints2: E - E:\Autorun.exe MountPoints2: {19b3c57d-1ae9-11e3-bd6b-4c72b91a45e6} - E:\Startme.exe MountPoints2: {aaee438e-2a61-11e2-98e5-4c72b91a45e6} - E:\Autorun.exe MountPoints2: {d25a96c2-19c5-11e2-9e90-4c72b91a45e6} - E:\unlock.exe autoplay=true HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-20] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation) HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFETY~2.DLL [97280 2009-07-14] () AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll c:\progra~2\movies~1\safety~1\safety~2.dll [ ] () IMEO\bitguard.exe: [Debugger] tasklist.exe IMEO\bprotect.exe: [Debugger] tasklist.exe IMEO\browserdefender.exe: [Debugger] tasklist.exe IMEO\browserprotect.exe: [Debugger] tasklist.exe Startup: C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Caroline\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120925085242.dll No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>) BHO-x32: Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx.dll No File BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120925085242.dll No File BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default FF NewTab: www.google.com FF DefaultSearchEngine: LEO Eng-Deu FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: LEO Eng-Deu FF Homepage: hxxp://www.google.com/ FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Caroline\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki) FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\englische-ergebnisse.xml FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\gmx-suche.xml FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\lastminute.xml FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\webde-suche.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: TubeSaver - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\132 FF Extension: Movies Toolbar (Dist. by Somoto Ltd.) - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{3444c3c5-6c56-4a16-a453-832b05bf6ea4} FF Extension: New tab - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{9572F96B-8DD3-0D00-CE9F-956955F73C86} FF Extension: Movies Toolbar (Dist. by Koyote-Lab, Inc.) - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{a3a8ba13-8b56-46e6-8bc6-2746089b6cb2} FF Extension: New tab - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{B08F8994-AC71-AB07-5E09-CB39FD50DF38} FF Extension: firefox - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\firefox@lemurleap.info.xpi FF Extension: toolbar - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\toolbar@gmx.net.xpi FF Extension: No Name - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi FF Extension: No Name - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF HKCU\...\Firefox\Extensions: [{c4cf403f-d86b-4e5a-a55a-ef6a06352881}] - C:\Program Files (x86)\TubeSaver\132.xpi FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi Chrome: ======= CHR DefaultSearchURL: (Ask.com) - hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=135&systemid=414&v=a9397-123&apn_uid=0203701102144170&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms} CHR DefaultSuggestURL: (Ask.com) - "suggest_url": "", CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll () CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.) CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll No File CHR Plugin: (DealPlyLive Update) - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Pokki Download Helper) - C:\Users\Caroline\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki) CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Extension: (Movies Toolbar) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomic\21.56058_0 CHR Extension: (Docs) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: (Google Drive) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0 CHR Extension: (YouTube) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0 CHR Extension: (Safe Money) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0 CHR Extension: (Content Blocker) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0 CHR Extension: (Virtual Keyboard) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Gmail) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR Extension: (Anti-Banner) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0 CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Caroline\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [ddjobbmbkpnhmiloopddfpnedcmhcdpg] - C:\Program Files (x86)\Movies Toolbar\Datamngr\chromeExtension.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [jlnfdbbladgcmhhamgkioifhbobjaoof] - C:\Program Files (x86)\LemurLeap\jlnfdbbladgcmhhamgkioifhbobjaoof.crx CHR HKLM-x32\...\Chrome\Extension: [ojcdnngpmbenohhjlickdajclhbcaada] - C:\Program Files (x86)\TubeSaver\132.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\ab.crx ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO) S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-09-06] (WildTangent) R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-10] () R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-09-14] (TuneUp Software) S2 SafetyNutManager; C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe [x] S2 vToolbarUpdater17.0.12; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [x] ==================== Drivers (Whitelisted) ==================== R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [46368 2013-10-02] (AVG Technologies) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-10] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-10] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-13] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-13] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [21096 2012-01-05] (Realtek Microelectronics) R3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtwlane.sys [1082472 2012-01-17] (Realtek Semiconductor Corporation ) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software) U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-13] (Kaspersky Lab ZAO) S3 TDEIO; \??\C:\Windows\SysWOW64\sysprep\BOOTPRIO\tdeio64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-11 09:27 - 2013-10-11 09:27 - 01954124 _____ (Farbar) C:\Users\Caroline\Downloads\FRST64.exe 2013-10-11 09:27 - 2013-10-11 09:27 - 00000000 ____D C:\FRST 2013-10-11 00:36 - 2013-10-11 00:36 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-10-11 00:35 - 2013-10-11 00:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-11 00:35 - 2013-10-11 00:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-11 00:34 - 2013-10-11 00:34 - 00281896 _____ (Mozilla) C:\Users\Caroline\Downloads\Firefox Setup Stub 24.0.exe 2013-10-11 00:32 - 2013-10-11 00:32 - 00002288 _____ C:\Users\Caroline\Desktop\Safe Money.lnk 2013-10-10 10:22 - 2013-10-10 10:22 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Caroline\Downloads\revosetup95.exe 2013-10-10 10:22 - 2013-10-10 10:22 - 00001275 _____ C:\Users\Caroline\Desktop\Revo Uninstaller.lnk 2013-10-10 10:22 - 2013-10-10 10:22 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-10-10 09:55 - 2013-10-10 09:55 - 00706916 _____ C:\Users\Caroline\Downloads\delfix.exe 2013-10-09 18:36 - 2013-10-09 18:36 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-10-09 18:15 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-10-09 18:15 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-10-09 18:15 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-10-09 18:15 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-10-09 18:15 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-10-09 18:15 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-10-09 18:15 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-10-09 18:15 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-10-09 18:15 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-10-09 18:15 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-10-09 18:15 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2013-10-09 18:15 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 17:59 - 2013-10-09 18:03 - 00000000 ____D C:\windows\system32\MRT 2013-10-09 17:59 - 2013-09-26 01:46 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-10-09 17:49 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2013-10-09 17:49 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-10-09 17:49 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll 2013-10-09 17:49 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll 2013-10-09 17:49 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2013-10-09 17:49 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2013-10-09 17:49 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll 2013-10-09 17:49 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll 2013-10-09 17:49 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll 2013-10-09 17:49 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe 2013-10-09 17:49 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe 2013-10-09 17:49 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll 2013-10-09 17:49 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll 2013-10-09 17:49 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll 2013-10-09 17:49 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll 2013-10-09 17:49 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe 2013-10-09 17:49 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll 2013-10-09 17:49 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe 2013-10-09 17:49 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe 2013-10-09 17:49 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2013-10-09 17:49 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 17:49 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 17:49 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys 2013-10-09 17:49 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys 2013-10-09 17:49 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll 2013-10-09 17:49 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll 2013-10-09 17:49 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll 2013-10-09 17:49 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll 2013-10-09 17:49 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll 2013-10-09 17:49 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll 2013-10-09 17:49 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys 2013-10-09 17:49 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys 2013-10-09 17:49 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys 2013-10-09 17:49 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys 2013-10-09 17:49 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys 2013-10-09 17:49 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll 2013-10-09 17:49 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll 2013-10-09 17:49 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll 2013-10-09 17:49 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2013-10-09 17:49 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll 2013-10-09 17:49 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll 2013-10-09 17:49 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll 2013-10-09 17:49 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2013-10-09 17:49 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll 2013-10-09 17:49 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll 2013-10-09 17:48 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll 2013-10-09 17:48 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2013-10-09 17:47 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys 2013-10-09 17:47 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys 2013-10-09 17:19 - 2013-10-09 19:04 - 00000755 _____ C:\DelFix.txt 2013-10-09 08:57 - 2013-10-09 09:29 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-10-09 08:54 - 2013-10-09 08:54 - 00000207 _____ C:\windows\tweaking.com-regbackup-CARO-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2013-10-09 08:53 - 2013-10-09 08:53 - 00000000 ____D C:\RegBackup 2013-10-09 08:22 - 2013-10-09 08:22 - 00003288 ____N C:\bootsqm.dat 2013-10-07 18:19 - 2013-10-07 17:16 - 00000000 ____D C:\Users\Caroline\fotos-verteilen 2013-10-07 18:16 - 2013-10-07 18:16 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-10-07 11:25 - 2013-10-07 11:25 - 00015412 _____ C:\Users\Caroline\Documents\bookmarks-2013-10-07.json 2013-10-04 10:37 - 2013-10-04 10:37 - 00002030 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2013-10-04 09:25 - 2013-10-09 17:19 - 00000000 ____D C:\windows\ERUNT 2013-10-04 09:10 - 2013-10-04 09:10 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-10-04 09:08 - 2013-10-04 09:08 - 00000000 ____D C:\Users\Caroline\AppData\Local\WebPlayer 2013-10-04 09:07 - 2013-10-04 09:07 - 00000000 ____D C:\Users\Caroline\AppData\Local\somotomoviestoolbar1 2013-10-04 09:06 - 2013-10-09 23:20 - 00000000 ____D C:\ProgramData\SafetyNut 2013-10-04 09:06 - 2013-10-04 09:06 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar 2013-10-04 09:03 - 2013-10-04 09:03 - 00166616 _____ () C:\Users\Caroline\Downloads\7ZipSetup.exe 2013-10-04 07:34 - 2013-10-09 18:38 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-04 07:34 - 2013-10-09 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-04 07:34 - 2013-10-04 07:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Malwarebytes 2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-04 07:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-10-03 16:35 - 2013-10-03 16:36 - 00000000 ____D C:\Users\Caroline\Downloads\James Horner - Avatar [2156] PL 2013-10-03 08:14 - 2013-10-03 08:23 - 00000000 ____D C:\AdwCleaner 2013-09-29 22:00 - 2013-09-29 22:01 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\WildTangent 2013-09-29 21:59 - 2013-09-29 21:59 - 00002625 ____N C:\Users\Public\Desktop\WildTangent Games App - toshiba.lnk 2013-09-19 11:57 - 2013-09-19 11:57 - 00001122 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk 2013-09-17 09:31 - 2013-09-17 09:31 - 02192667 _____ C:\Users\Caroline\Documents\Backup Samsung Caro 2013-09-17.mpb 2013-09-16 19:08 - 2013-09-16 19:08 - 00000000 ____D C:\Users\Caroline\Downloads\Kaspersky Internet Security 2013 v13.0.0.3370 FINAL + Keys [ThumperDC] 2013-09-14 15:45 - 2013-09-23 12:39 - 00000546 _____ C:\windows\wininit.ini 2013-09-13 09:08 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\windows\system32\klfphc.dll 2013-09-13 09:07 - 2013-10-11 09:19 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\windows\ELAMBKUP 2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-13 08:42 - 2013-09-13 08:42 - 00000000 ____D C:\Program Files\License Keys For all Antivirus Latest 2013-09-13 08:38 - 2013-09-13 08:38 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\HTML Executable 2013-09-13 08:14 - 2013-09-13 08:31 - 00000000 ____D C:\Users\Caroline\Downloads\The Best Antivirus Software of 2013 Premium Edition Mega Pack 2013-09-11 18:51 - 2013-09-19 08:18 - 00002037 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\ProgramData\Sony 2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\Program Files (x86)\Sony 2013-09-11 18:49 - 2013-09-11 18:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf 2013-09-11 11:12 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys 2013-09-11 11:11 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll 2013-09-11 11:11 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2013-09-11 11:11 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll 2013-09-11 11:11 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe 2013-09-11 11:11 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe 2013-09-11 11:11 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-09-11 11:11 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-09-11 11:11 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2013-09-11 11:11 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll 2013-09-11 11:11 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2013-09-11 11:11 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll 2013-09-11 11:01 - 2013-09-11 11:01 - 97080355 _____ C:\windows\SysWOW64\⎇剼�B ==================== One Month Modified Files and Folders ======= 2013-10-11 09:27 - 2013-10-11 09:27 - 01954124 _____ (Farbar) C:\Users\Caroline\Downloads\FRST64.exe 2013-10-11 09:27 - 2013-10-11 09:27 - 00000000 ____D C:\FRST 2013-10-11 09:21 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-11 09:21 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-11 09:20 - 2012-06-05 16:52 - 01079928 _____ C:\windows\WindowsUpdate.log 2013-10-11 09:20 - 2011-02-11 10:21 - 00640538 _____ C:\windows\system32\perfh007.dat 2013-10-11 09:20 - 2011-02-11 10:21 - 00126070 _____ C:\windows\system32\perfc007.dat 2013-10-11 09:20 - 2009-07-14 07:13 - 01498742 _____ C:\windows\system32\PerfStringBackup.INI 2013-10-11 09:19 - 2013-09-13 09:07 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-10-11 09:17 - 2012-09-26 20:25 - 00000000 ___RD C:\Users\Caroline\Dropbox 2013-10-11 09:17 - 2012-09-25 22:39 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Dropbox 2013-10-11 09:16 - 2012-06-05 16:58 - 00000828 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2013-10-11 09:16 - 2012-05-10 23:30 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-11 09:15 - 2013-01-07 23:35 - 00000266 _____ C:\windows\Tasks\AutoKMS.job 2013-10-11 09:15 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-10-11 09:15 - 2009-07-14 06:51 - 00096937 _____ C:\windows\setupact.log 2013-10-11 00:46 - 2013-06-14 11:11 - 00002266 _____ C:\Users\Caroline\Desktop\Google Chrome.lnk 2013-10-11 00:36 - 2013-10-11 00:36 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-10-11 00:36 - 2013-10-11 00:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-11 00:36 - 2013-10-11 00:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-11 00:34 - 2013-10-11 00:34 - 00281896 _____ (Mozilla) C:\Users\Caroline\Downloads\Firefox Setup Stub 24.0.exe 2013-10-11 00:32 - 2013-10-11 00:32 - 00002288 _____ C:\Users\Caroline\Desktop\Safe Money.lnk 2013-10-11 00:29 - 2010-11-21 05:47 - 00361830 _____ C:\windows\PFRO.log 2013-10-10 10:22 - 2013-10-10 10:22 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Caroline\Downloads\revosetup95.exe 2013-10-10 10:22 - 2013-10-10 10:22 - 00001275 _____ C:\Users\Caroline\Desktop\Revo Uninstaller.lnk 2013-10-10 10:22 - 2013-10-10 10:22 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2013-10-10 10:18 - 2012-09-25 08:48 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Skype 2013-10-10 10:14 - 2012-05-10 23:30 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-10 10:01 - 2012-05-10 23:25 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2013-10-10 09:55 - 2013-10-10 09:55 - 00706916 _____ C:\Users\Caroline\Downloads\delfix.exe 2013-10-10 08:27 - 2012-07-25 14:53 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klmouflt.sys 2013-10-10 08:27 - 2012-05-25 19:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys 2013-10-10 08:26 - 2012-08-13 18:24 - 00626272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys 2013-10-10 08:26 - 2012-06-19 17:28 - 07717984 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys 2013-10-09 23:20 - 2013-10-04 09:06 - 00000000 ____D C:\ProgramData\SafetyNut 2013-10-09 19:04 - 2013-10-09 17:19 - 00000755 _____ C:\DelFix.txt 2013-10-09 18:38 - 2013-10-04 07:34 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-09 18:38 - 2013-10-04 07:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-09 18:36 - 2013-10-09 18:36 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-10-09 18:26 - 2009-07-14 06:45 - 00425400 _____ C:\windows\system32\FNTCACHE.DAT 2013-10-09 18:25 - 2013-03-12 23:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-09 18:25 - 2013-03-12 23:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-09 18:21 - 2012-09-26 09:12 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-09 18:12 - 2012-10-11 17:37 - 00000000 ____D C:\Users\Caroline\Documents\UNIVERSITY 2013-10-09 18:03 - 2013-10-09 17:59 - 00000000 ____D C:\windows\system32\MRT 2013-10-09 17:19 - 2013-10-04 09:25 - 00000000 ____D C:\windows\ERUNT 2013-10-09 10:50 - 2012-06-05 16:58 - 00000830 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2013-10-09 09:34 - 2012-09-20 13:20 - 00116496 _____ C:\Users\Caroline\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-09 09:31 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-10-09 09:29 - 2013-10-09 08:57 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE 2013-10-09 09:28 - 2009-07-14 04:34 - 00000546 _____ C:\windows\win.ini 2013-10-09 09:19 - 2012-12-10 12:07 - 00000000 ____D C:\Users\Caroline\Documents\Noten 2013-10-09 08:54 - 2013-10-09 08:54 - 00000207 _____ C:\windows\tweaking.com-regbackup-CARO-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2013-10-09 08:53 - 2013-10-09 08:53 - 00000000 ____D C:\RegBackup 2013-10-09 08:22 - 2013-10-09 08:22 - 00003288 ____N C:\bootsqm.dat 2013-10-07 18:19 - 2012-09-20 13:17 - 00000000 ____D C:\Users\Caroline 2013-10-07 18:16 - 2013-10-07 18:16 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-10-07 17:16 - 2013-10-07 18:19 - 00000000 ____D C:\Users\Caroline\fotos-verteilen 2013-10-07 11:25 - 2013-10-07 11:25 - 00015412 _____ C:\Users\Caroline\Documents\bookmarks-2013-10-07.json 2013-10-04 10:37 - 2013-10-04 10:37 - 00002030 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2013-10-04 09:30 - 2013-01-19 18:14 - 00000000 ____D C:\Users\Caroline\Documents\This and That 2013-10-04 09:10 - 2013-10-04 09:10 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-10-04 09:08 - 2013-10-04 09:08 - 00000000 ____D C:\Users\Caroline\AppData\Local\WebPlayer 2013-10-04 09:07 - 2013-10-04 09:07 - 00000000 ____D C:\Users\Caroline\AppData\Local\somotomoviestoolbar1 2013-10-04 09:06 - 2013-10-04 09:06 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar 2013-10-04 09:03 - 2013-10-04 09:03 - 00166616 _____ () C:\Users\Caroline\Downloads\7ZipSetup.exe 2013-10-04 07:34 - 2013-10-04 07:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300.exe 2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Malwarebytes 2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-03 17:10 - 2012-11-12 21:17 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\uTorrent 2013-10-03 16:36 - 2013-10-03 16:35 - 00000000 ____D C:\Users\Caroline\Downloads\James Horner - Avatar [2156] PL 2013-10-03 08:23 - 2013-10-03 08:14 - 00000000 ____D C:\AdwCleaner 2013-10-02 20:49 - 2013-05-24 09:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak 2013-10-02 20:49 - 2012-09-25 07:28 - 00000000 ____D C:\Users\Caroline\AppData\Local\Mozilla 2013-10-02 19:49 - 2013-06-27 11:55 - 00003728 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml 2013-10-02 19:49 - 2013-05-05 14:09 - 00046368 _____ (AVG Technologies) C:\windows\system32\Drivers\avgtpx64.sys 2013-09-29 22:05 - 2012-05-10 23:20 - 00000000 ____D C:\ProgramData\WildTangent 2013-09-29 22:01 - 2013-09-29 22:00 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\WildTangent 2013-09-29 22:00 - 2012-05-10 23:20 - 00000000 ____D C:\Program Files (x86)\WildTangent Games 2013-09-29 21:59 - 2013-09-29 21:59 - 00002625 ____N C:\Users\Public\Desktop\WildTangent Games App - toshiba.lnk 2013-09-28 08:03 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF 2013-09-26 01:46 - 2013-10-09 17:59 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-09-23 12:39 - 2013-09-14 15:45 - 00000546 _____ C:\windows\wininit.ini 2013-09-23 01:28 - 2013-10-09 18:15 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-09-23 01:28 - 2013-10-09 18:15 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-09-23 01:27 - 2013-10-09 18:15 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-09-23 00:55 - 2013-10-09 18:15 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-09-23 00:55 - 2013-10-09 18:15 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-09 18:15 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-09 18:15 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-09-23 00:54 - 2013-10-09 18:15 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-09-21 05:38 - 2013-10-09 18:15 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-09-21 05:30 - 2013-10-09 18:15 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-09-21 04:48 - 2013-10-09 18:15 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2013-09-21 04:39 - 2013-10-09 18:15 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-19 11:57 - 2013-09-19 11:57 - 00001122 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk 2013-09-19 08:18 - 2013-09-11 18:51 - 00002037 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2013-09-19 08:18 - 2012-06-05 17:10 - 00345998 _____ C:\windows\DPINST.LOG 2013-09-19 08:17 - 2012-05-10 23:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-09-17 09:31 - 2013-09-17 09:31 - 02192667 _____ C:\Users\Caroline\Documents\Backup Samsung Caro 2013-09-17.mpb 2013-09-16 19:08 - 2013-09-16 19:08 - 00000000 ____D C:\Users\Caroline\Downloads\Kaspersky Internet Security 2013 v13.0.0.3370 FINAL + Keys [ThumperDC] 2013-09-14 03:10 - 2013-10-09 17:49 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2013-09-13 10:03 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys 2013-09-13 10:03 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kltdi.sys 2013-09-13 09:58 - 2012-08-13 18:24 - 00090208 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys 2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\windows\ELAMBKUP 2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-09-13 08:42 - 2013-09-13 08:42 - 00000000 ____D C:\Program Files\License Keys For all Antivirus Latest 2013-09-13 08:38 - 2013-09-13 08:38 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\HTML Executable 2013-09-13 08:31 - 2013-09-13 08:14 - 00000000 ____D C:\Users\Caroline\Downloads\The Best Antivirus Software of 2013 Premium Edition Mega Pack 2013-09-11 18:53 - 2013-09-06 19:18 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\MyPhoneExplorer 2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\ProgramData\Sony 2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\Program Files (x86)\Sony 2013-09-11 18:49 - 2013-09-11 18:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf 2013-09-11 15:53 - 2012-09-20 13:19 - 00000000 ___RD C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-09-11 15:53 - 2012-09-20 13:17 - 00000000 ___RD C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-11 11:01 - 2013-09-11 11:01 - 97080355 _____ C:\windows\SysWOW64\⎇剼�B ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-28 15:33 ==================== End Of Log ============================ |
11.10.2013, 09:01 | #20 |
/// the machine /// TB-Ausbilder | Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.10.2013, 09:07 | #21 |
| Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Ja leider die seitlichen Pop Up Fenster tauchen immer noch auf! |
11.10.2013, 12:03 | #22 |
/// the machine /// TB-Ausbilder | Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Kannste mir davon mal nen Screenshot machen? Immer noch nur in Firefox? Wurden wirklich keine Daten behalten? Addon Adblock Plus ist installiert?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.10.2013, 16:54 | #23 |
| Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! Ok, jetzt ist der Blocker wieder installiert und momentan kommen auch keine Pop Up Fenster!!! Vielen lieben Dank!!! LG |
12.10.2013, 14:52 | #24 |
/// the machine /// TB-Ausbilder | Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |