|
Plagegeister aller Art und deren Bekämpfung: PolizeivirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.10.2013, 10:36 | #16 |
/// the machine /// TB-Ausbilder | Polizeivirus Das ist ein direkter Download, bei mir geht er. Welcher Browser? Versuch mal Rechtsklick Speichern unter.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.10.2013, 23:47 | #17 |
| Polizeivirus Habe den Internet Explorer. Geht auch mit speichern unter nicht.
__________________ |
26.10.2013, 13:19 | #18 |
/// the machine /// TB-Ausbilder | Polizeivirus Eigentlich unmöglich. Mach mal mit Firefox
__________________
__________________ |
27.10.2013, 15:17 | #19 |
| Polizeivirus Mit Firefox klappt der Download, aber jetzt steht die Datei kann nicht geöffnet werden. Das Programm mit dem sie die Datei öffnen möchten muss bekannt sein. |
27.10.2013, 19:00 | #20 |
/// the machine /// TB-Ausbilder | Polizeivirus Was genau hast Du geladen?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.10.2013, 02:47 | #21 |
| Polizeivirus Na mit Firefox auf deinen link geklickt, und dann au ausführen. Edit: Hab jetzt nochmals versucht nen Scan zu machen und siehe da, plötzlich bleibt es nicht mehr hängen. Keine Ahnung warum... FRST Log: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-10-2013 01 Ran by d-ro (administrator) on D-RO-PC on 28-10-2013 02:58:02 Running from C:\Users\d-ro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XV348SN Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\Windows\runservice.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Ralink Technology, Corp.) C:\Windows\SysWOW64\MotWirelessSvc.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PMMUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe (Somoto) C:\Users\d-ro\AppData\Local\FilesFrog Update Checker\update_checker.exe (SafetyNut Inc.) C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe (SafetyNut Inc.) C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe (SafetyNut Inc.) C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetynut.exe () c:\progra~2\optimi~1\OptProCrash.exe () C:\Users\d-ro\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe () C:\Users\d-ro\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\bin\HPNetworkCommunicator.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation) HKLM-x32\...\Runonce: [network_matomyi_1] - [x] Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [MMAgent] - C:\Program Files (x86)\Mobile Master\MMAgent.exe [1400672 2012-04-20] (Jumping Bytes) HKCU\...\Run: [Steam] - C:\Program Files (x86)\Dominik\Games\SEGA\Football Manager 2012\Steam.exe [1813928 2013-10-09] (Valve Corporation) HKCU\...\Run: [AviraSpeedup] - C:\Program Files (x86)\AviraSpeedup\AviraSpeedup.exe [4856296 2012-11-05] (Avira) HKCU\...\Run: [HP Deskjet 3070 B611 series (NET)] - C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2676584 2011-06-08] (Hewlett-Packard Co.) HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path) HKCU\...\Run: [bitssc] - rundll32 "C:\Windows\system32\convlder64.dll",CreateProcessNotify HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd) HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-10] () HKCU\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135672 2013-09-29] (PC Utilities Pro) HKCU\...\Run: [AppsHat] - C:\Users\d-ro\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] () HKCU\...\Run: [FLV Player] - C:\Users\d-ro\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752 2012-10-26] () MountPoints2: F - F:\autorun.exe MountPoints2: {030d2f9f-0882-11e1-84b0-806e6f6e6963} - D:\Autorun.exe MountPoints2: {0ac49cc8-a7eb-11e1-9d5d-806e6f6e6963} - F:\HTC_Sync_Manager_PC.exe MountPoints2: {a37e3778-674d-11e2-ae25-90a03642cea8} - F:\autorun.exe MountPoints2: {a7736ea2-b2f6-11e1-b9ba-dc0ea10f05ff} - F:\HTC_Sync_Manager_PC.exe MountPoints2: {f5353af6-6897-11e2-9b6a-bd8b8507a0e1} - F:\autorun.exe MountPoints2: {f5353e87-6897-11e2-9b6a-bd8b8507a0e1} - F:\HTC_Sync_Manager_PC.exe MountPoints2: {f5353e9e-6897-11e2-9b6a-bd8b8507a0e1} - F:\HTC_Sync_Manager_PC.exe HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-06-21] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] () HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFETY~2.DLL C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL [22536 2013-10-09] () AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll c:\progra~2\movies~1\safety~1\safety~2.dll c:\progra~2\optimi~1\optpro~1.dll [2869720 2013-10-17] () IMEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\agatha christie - death on the nile-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\bejeweled 2 deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\bitguard.exe: [Debugger] tasklist.exe IMEO\bprotect.exe: [Debugger] tasklist.exe IMEO\browsemngr.exe: [Debugger] tasklist.exe IMEO\browserdefender.exe: [Debugger] tasklist.exe IMEO\browsermngr.exe: [Debugger] tasklist.exe IMEO\browserprotect.exe: [Debugger] tasklist.exe IMEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IMEO\cc_kart2-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\chuzzle deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\cltmngsvc.exe: [Debugger] tasklist.exe IMEO\cnmnsst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\cnmnsu.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\cnsemain.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\delta babylon.exe: [Debugger] tasklist.exe IMEO\delta tb.exe: [Debugger] tasklist.exe IMEO\delta2.exe: [Debugger] tasklist.exe IMEO\deltainstaller.exe: [Debugger] tasklist.exe IMEO\deltasetup.exe: [Debugger] tasklist.exe IMEO\deltatb.exe: [Debugger] tasklist.exe IMEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IMEO\devicesetup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\devicesetuplauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\drivegreen1-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\fate-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hp deskjet 3070 b611 series.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpqdtss.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpqlpvwr.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\hpscan.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\htcupctloader.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\iminentsetup.exe: [Debugger] tasklist.exe IMEO\insaniquarium deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\jewel quest solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\jewelmatch3-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\mysteryofmortlakemansion-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\nobuclient.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\penguins-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\polar-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\provider.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\racing-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\rjatydimofu.exe: [Debugger] tasklist.exe IMEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\slingo deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\sweetimsetup.exe: [Debugger] tasklist.exe IMEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe IMEO\torchlight-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\virtualvillagers4thetreeoflife-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\wedding dash-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\zuma deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IMEO\zune.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" Startup: C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3070 B611 series\bin\HPStatusBL.dll (Hewlett-Packard Co.) Startup: C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wllfrjgf.lnk ShortcutTarget: wllfrjgf.lnk -> fgjrfllw.plz,GL300 (No File) HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetycrt.dll [485384 2013-10-09] () HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll [657928 2013-10-09] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com URLSearchHook: HKCU - (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions) SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx.dll () BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\Program Files (x86)\Movies Toolbar\SafetyNut\SRTOOL~1\IE\searchresultsDx.dll () DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\d-ro\AppData\Roaming\Mozilla\Firefox\Profiles\3fkzruso.default FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_34 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\6\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\d-ro\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Extension: a2zLyrics-16 - C:\Users\d-ro\AppData\Roaming\Mozilla\Firefox\Profiles\3fkzruso.default\Extensions\2f86d471-1122-4c15-901a-d7fd67316cd9@ca42b8d2-0eb6-47be-84a2-6d95abe186e8.com FF Extension: Movies Toolbar (Dist. by Somoto Ltd.) - C:\Users\d-ro\AppData\Roaming\Mozilla\Firefox\Profiles\3fkzruso.default\Extensions\{3444c3c5-6c56-4a16-a453-832b05bf6ea4} FF Extension: Apps Hat - C:\Users\d-ro\AppData\Roaming\Mozilla\Firefox\Profiles\3fkzruso.default\Extensions\{97A78363-B868-4B48-AC91-A783A31215AF} FF HKLM-x32\...\Thunderbird\Extensions: [{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}] - C:\Program Files (x86)\Mobile Master\ext\1\ FF Extension: Mobile Master Add-In - C:\Program Files (x86)\Mobile Master\ext\1\ Chrome: ======= CHR HomePage: hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=n9602-149&t=4 CHR RestoreOnStartup: "hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=n9602-149&t=4" CHR DefaultSearchURL: (Ask.com) - hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=103&systemid=473&v=n9602-149&apn_uid=9421734181624531&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms} CHR DefaultSuggestURL: (Ask.com) - "suggest_url": "", CHR Extension: (Movies Toolbar) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomic\21.56058_0 CHR Extension: (Google Docs) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (a2zLyrics-16) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfocabhmkfcdibnkgogpaclhgblhnemn\1.25.5_0 CHR Extension: (Minibar ) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo\2.0.1_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Gmail) - C:\Users\d-ro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\d-ro\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx ==================== Services (Whitelisted) ================= R2 70e6ca8c; c:\progra~2\optimi~1\OptProCrash.exe [143488 2013-10-28] () R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG) S2 appdrvrem01; C:\Windows\System32\appdrvrem01.exe [551896 2012-02-20] (Protection Technology) S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] () R2 LicCtrlService; C:\Windows\runservice.exe [2560 2012-04-30] () S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] () R2 RaAutoInstSrv_Motorola; C:\Windows\SysWOW64\MotWirelessSvc.exe [20480 2008-09-11] (Ralink Technology, Corp.) R2 SafetyNutManager; C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe [3422728 2013-10-09] (SafetyNut Inc.) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [277904 2013-03-25] (Protect Software GmbH) R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [228000 2013-03-25] (Protect Software GmbH) R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [3852976 2012-02-20] (Protection Technology) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-09-17] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-27] (DT Soft Ltd) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-09-17] () S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) S3 ZG760_64; C:\Windows\System32\DRIVERS\WlanGZ64.SYS [870912 2009-04-17] (ZyDAS Technology Corporation) S3 b57xdbd; \SystemRoot\system32\drivers\b57xdbd.sys [x] S3 b57xdmp; \SystemRoot\system32\drivers\b57xdmp.sys [x] S3 bScsiMSa; \SystemRoot\system32\drivers\bScsiMSa.sys [x] S3 bScsiSDa; system32\DRIVERS\bScsiSDa.sys [x] S3 HTCAND64; System32\Drivers\ANDROIDUSB.sys [x] S3 k57nd60a; system32\DRIVERS\k57nd60a.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\BrowserProtect 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\Browser Manager 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\BitGuard 2013-10-28 01:43 - 2013-10-28 01:43 - 00000000 ____D C:\Users\d-ro\Documents\Optimizer Pro 2013-10-28 01:43 - 2013-10-28 01:43 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Optimizer Pro 2013-10-28 01:42 - 2013-10-28 01:42 - 00163400 _____ () C:\Users\d-ro\Downloads\VideoPlayer-3Loxqme.exe 2013-10-28 01:42 - 2013-10-28 01:42 - 00004276 _____ C:\Windows\System32\Tasks\a2zLyrics-16-codedownloader 2013-10-28 01:42 - 2013-10-28 01:42 - 00001954 _____ C:\Windows\Tasks\a2zLyrics-16-chromeinstaller.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00001880 _____ C:\Windows\Tasks\a2zLyrics-16-firefoxinstaller.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00001246 _____ C:\Windows\Tasks\a2zLyrics-16-codedownloader.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-16 2013-10-28 01:38 - 2013-10-28 01:42 - 00000000 ____D C:\Users\d-ro\AppData\Local\WebPlayer 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Program Files (x86)\Minibar 2013-10-28 01:37 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Local\Minibar 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\Users\d-ro\AppData\Local\somotomoviestoolbar1 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\ProgramData\Wincert 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-10-28 01:36 - 2013-10-28 02:49 - 00000000 ____D C:\ProgramData\SafetyNut 2013-10-28 01:36 - 2013-10-28 01:36 - 00163400 _____ () C:\Users\d-ro\Downloads\VideoPlayer-aZWIML0.exe 2013-10-28 01:36 - 2013-10-28 01:36 - 00003242 _____ C:\Windows\System32\Tasks\SomotoUpdateCheckerAutoStart 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Users\d-ro\AppData\Local\FilesFrog Update Checker 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar 2013-10-27 15:15 - 2013-10-27 15:15 - 00002634 _____ C:\Users\d-ro\Downloads\Winmgmt(1).reg 2013-10-27 15:14 - 2013-10-27 15:14 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Users\d-ro\AppData\Local\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\ProgramData\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-27 15:13 - 2013-10-27 15:13 - 00281640 _____ (Mozilla) C:\Users\d-ro\Downloads\Firefox Setup Stub 24.0.exe 2013-10-27 14:50 - 2013-10-27 14:50 - 01956160 _____ (Farbar) C:\Users\d-ro\Downloads\FRST64.exe 2013-10-27 14:48 - 2013-10-27 14:49 - 01089001 _____ (Farbar) C:\Users\d-ro\Downloads\FRST (1).exe 2013-10-27 14:48 - 2013-10-27 14:48 - 01089001 _____ (Farbar) C:\Users\d-ro\Downloads\FRST.exe 2013-10-25 23:50 - 2013-10-25 23:50 - 00002634 _____ C:\Users\d-ro\Desktop\Winmgmt (1).reg 2013-10-25 23:49 - 2013-10-25 23:49 - 00002634 _____ C:\Users\d-ro\Downloads\Winmgmt.reg 2013-10-25 23:48 - 2013-10-28 01:59 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-25 23:48 - 2013-10-28 00:59 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-25 23:48 - 2013-10-25 23:54 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-25 23:48 - 2013-10-25 23:54 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-25 23:48 - 2013-10-25 23:48 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-25 23:48 - 2013-10-25 23:48 - 00000000 ____D C:\Program Files (x86)\Google 2013-10-25 23:47 - 2013-10-25 23:48 - 00000000 ____D C:\Users\d-ro\AppData\Local\Deployment 2013-10-25 23:47 - 2013-10-25 23:47 - 00000000 ____D C:\Users\d-ro\AppData\Local\Apps\2.0 2013-10-23 18:23 - 2013-10-23 18:23 - 00010214 _____ C:\Users\d-ro\Desktop\Games,DVD Liste.xlsx 2013-10-21 22:36 - 2013-10-21 22:36 - 00000000 ____D C:\Users\d-ro\Desktop\schnurrli 2013-10-21 21:55 - 2013-10-21 21:55 - 00061544 ____T (Microsoft Corporation) C:\ProgramData\wllfrjgf.pzz 2013-10-21 00:03 - 2013-10-21 21:55 - 01577984 ____T C:\ProgramData\wllfrjgf.fki 2013-10-20 23:43 - 2013-10-22 16:38 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro 2013-10-20 23:43 - 2013-10-20 23:43 - 00074240 _____ C:\Windows\system32\convlder64.dll 2013-10-20 23:37 - 2013-10-25 23:48 - 00000000 ____D C:\Users\d-ro\AppData\Local\Google 2013-10-20 23:37 - 2013-10-20 23:52 - 00000000 ____D C:\ProgramData\lnDan373 2013-10-16 18:15 - 2013-10-16 18:15 - 00003027 _____ C:\Users\d-ro\Desktop\JRT.txt 2013-10-16 18:09 - 2013-10-16 18:09 - 00000000 ____D C:\Windows\ERUNT 2013-10-16 17:56 - 2013-10-16 17:58 - 00000000 ____D C:\AdwCleaner 2013-10-15 23:51 - 2013-10-15 23:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Malwarebytes 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-15 23:51 - 2013-04-04 13:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-15 23:50 - 2013-10-15 23:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\d-ro\Desktop\mbam-setup-1.75.0.1300.exe 2013-10-15 21:57 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-15 21:57 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-15 09:50 - 2013-10-22 15:53 - 00000000 ____D C:\FRST 2013-10-13 00:49 - 2013-07-17 15:42 - 00000034 _____ C:\Users\d-ro\Downloads\PS.txt 2013-10-12 22:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-12 22:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-12 22:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-12 22:04 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-12 22:04 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-12 22:04 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-12 22:04 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-12 22:04 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-12 22:04 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-12 22:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-12 22:04 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-12 22:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 14:41 - 2013-10-11 14:41 - 00000000 ____D C:\be9b450fd522e3262c5851da355f06 2013-10-11 14:22 - 2013-10-11 14:23 - 00262144 _____ C:\Windows\Minidump\101113-24164-01.dmp 2013-10-10 17:43 - 2013-09-13 12:39 - 00001791 _____ C:\Users\d-ro\Downloads\Support Me.htm 2013-10-10 16:32 - 2013-04-27 04:22 - 00000908 _____ C:\Users\d-ro\Downloads\uploaded by drpcdoki.txt 2013-10-10 01:54 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-10 01:54 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-10 01:53 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-10 01:53 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-10 01:53 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-10 01:53 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-10 01:53 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-10 01:53 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-10 01:53 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-10 01:53 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-10 01:53 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-10 01:53 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-10 01:52 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-10 01:52 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-10 01:52 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-10 01:51 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-10 01:51 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-10 01:51 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-10 01:51 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-10 01:51 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-10 01:51 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-10 01:51 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 01:51 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-10 01:51 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-10 01:51 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-10 01:51 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-10 01:51 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-10 01:50 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-10 01:50 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-10 01:50 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-10 01:50 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-10 01:50 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-10 01:50 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 01:50 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 01:50 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-10 01:50 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-10 01:50 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-10 01:50 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-10 01:50 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-10 01:50 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 01:50 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-10 01:50 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-10 01:50 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-10 01:48 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-10 01:48 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 01:48 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 01:47 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-06 12:32 - 2013-10-06 12:32 - 00266288 _____ C:\Windows\Minidump\100613-24055-01.dmp ==================== One Month Modified Files and Folders ======= 2013-10-28 02:49 - 2013-10-28 01:36 - 00000000 ____D C:\ProgramData\SafetyNut 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\BrowserProtect 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\Browser Manager 2013-10-28 02:15 - 2013-10-28 02:15 - 00000000 ____D C:\ProgramData\BitGuard 2013-10-28 02:04 - 2012-04-26 10:28 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-28 01:59 - 2013-10-25 23:48 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-28 01:43 - 2013-10-28 01:43 - 00000000 ____D C:\Users\d-ro\Documents\Optimizer Pro 2013-10-28 01:43 - 2013-10-28 01:43 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Optimizer Pro 2013-10-28 01:42 - 2013-10-28 01:42 - 00163400 _____ () C:\Users\d-ro\Downloads\VideoPlayer-3Loxqme.exe 2013-10-28 01:42 - 2013-10-28 01:42 - 00004276 _____ C:\Windows\System32\Tasks\a2zLyrics-16-codedownloader 2013-10-28 01:42 - 2013-10-28 01:42 - 00001954 _____ C:\Windows\Tasks\a2zLyrics-16-chromeinstaller.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00001880 _____ C:\Windows\Tasks\a2zLyrics-16-firefoxinstaller.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00001246 _____ C:\Windows\Tasks\a2zLyrics-16-codedownloader.job 2013-10-28 01:42 - 2013-10-28 01:42 - 00000000 ____D C:\Program Files (x86)\a2zLyrics-16 2013-10-28 01:42 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Local\WebPlayer 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-10-28 01:38 - 2013-10-28 01:38 - 00000000 ____D C:\Program Files (x86)\Minibar 2013-10-28 01:38 - 2013-10-28 01:37 - 00000000 ____D C:\Users\d-ro\AppData\Local\Minibar 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\Users\d-ro\AppData\Local\somotomoviestoolbar1 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\ProgramData\Wincert 2013-10-28 01:37 - 2013-10-28 01:37 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-10-28 01:36 - 2013-10-28 01:36 - 00163400 _____ () C:\Users\d-ro\Downloads\VideoPlayer-aZWIML0.exe 2013-10-28 01:36 - 2013-10-28 01:36 - 00003242 _____ C:\Windows\System32\Tasks\SomotoUpdateCheckerAutoStart 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Users\d-ro\AppData\Local\FilesFrog Update Checker 2013-10-28 01:36 - 2013-10-28 01:36 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar 2013-10-28 01:35 - 2011-11-06 15:20 - 01587402 _____ C:\Windows\WindowsUpdate.log 2013-10-28 01:02 - 2012-03-11 18:52 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3054353935-986533666-2989170981-1001UA.job 2013-10-28 00:59 - 2013-10-25 23:48 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-28 00:45 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-28 00:45 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-28 00:40 - 2011-11-06 16:00 - 00697098 _____ C:\Windows\system32\perfh007.dat 2013-10-28 00:40 - 2011-11-06 16:00 - 00148362 _____ C:\Windows\system32\perfc007.dat 2013-10-28 00:40 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-28 00:38 - 2012-02-18 17:29 - 00000000 ____D C:\ProgramData\clear.fi 2013-10-28 00:35 - 2013-01-23 02:11 - 00031542 _____ C:\Windows\setupact.log 2013-10-28 00:35 - 2012-04-30 23:28 - 00000833 ___SH C:\Windows\SysWOW64\mmf.sys 2013-10-28 00:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-27 15:15 - 2013-10-27 15:15 - 00002634 _____ C:\Users\d-ro\Downloads\Winmgmt(1).reg 2013-10-27 15:14 - 2013-10-27 15:14 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Users\d-ro\AppData\Local\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\ProgramData\Mozilla 2013-10-27 15:14 - 2013-10-27 15:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-27 15:14 - 2012-07-22 23:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-27 15:13 - 2013-10-27 15:13 - 00281640 _____ (Mozilla) C:\Users\d-ro\Downloads\Firefox Setup Stub 24.0.exe 2013-10-27 14:50 - 2013-10-27 14:50 - 01956160 _____ (Farbar) C:\Users\d-ro\Downloads\FRST64.exe 2013-10-27 14:49 - 2013-10-27 14:48 - 01089001 _____ (Farbar) C:\Users\d-ro\Downloads\FRST (1).exe 2013-10-27 14:48 - 2013-10-27 14:48 - 01089001 _____ (Farbar) C:\Users\d-ro\Downloads\FRST.exe 2013-10-27 14:44 - 2013-03-14 16:30 - 00138346 _____ C:\Windows\PFRO.log 2013-10-26 21:53 - 2012-03-11 18:52 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3054353935-986533666-2989170981-1001Core.job 2013-10-25 23:54 - 2013-10-25 23:48 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-25 23:54 - 2013-10-25 23:48 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-25 23:50 - 2013-10-25 23:50 - 00002634 _____ C:\Users\d-ro\Desktop\Winmgmt (1).reg 2013-10-25 23:49 - 2013-10-25 23:49 - 00002634 _____ C:\Users\d-ro\Downloads\Winmgmt.reg 2013-10-25 23:48 - 2013-10-25 23:48 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-25 23:48 - 2013-10-25 23:48 - 00000000 ____D C:\Program Files (x86)\Google 2013-10-25 23:48 - 2013-10-25 23:47 - 00000000 ____D C:\Users\d-ro\AppData\Local\Deployment 2013-10-25 23:48 - 2013-10-20 23:37 - 00000000 ____D C:\Users\d-ro\AppData\Local\Google 2013-10-25 23:47 - 2013-10-25 23:47 - 00000000 ____D C:\Users\d-ro\AppData\Local\Apps\2.0 2013-10-24 18:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-23 18:23 - 2013-10-23 18:23 - 00010214 _____ C:\Users\d-ro\Desktop\Games,DVD Liste.xlsx 2013-10-22 16:38 - 2013-10-20 23:43 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro 2013-10-22 15:53 - 2013-10-15 09:50 - 00000000 ____D C:\FRST 2013-10-22 15:50 - 2012-02-18 17:13 - 00000000 ___RD C:\Users\d-ro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-21 22:36 - 2013-10-21 22:36 - 00000000 ____D C:\Users\d-ro\Desktop\schnurrli 2013-10-21 21:55 - 2013-10-21 21:55 - 00061544 ____T (Microsoft Corporation) C:\ProgramData\wllfrjgf.pzz 2013-10-21 21:55 - 2013-10-21 00:03 - 01577984 ____T C:\ProgramData\wllfrjgf.fki 2013-10-20 23:52 - 2013-10-20 23:37 - 00000000 ____D C:\ProgramData\lnDan373 2013-10-20 23:43 - 2013-10-20 23:43 - 00074240 _____ C:\Windows\system32\convlder64.dll 2013-10-16 18:15 - 2013-10-16 18:15 - 00003027 _____ C:\Users\d-ro\Desktop\JRT.txt 2013-10-16 18:09 - 2013-10-16 18:09 - 00000000 ____D C:\Windows\ERUNT 2013-10-16 17:58 - 2013-10-16 17:56 - 00000000 ____D C:\AdwCleaner 2013-10-16 17:58 - 2013-06-22 19:18 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Uniblue 2013-10-16 17:58 - 2013-06-22 19:18 - 00000000 ____D C:\Program Files (x86)\Uniblue 2013-10-16 17:47 - 2013-06-07 23:48 - 00000000 ____D C:\Users\d-ro\AppData\Local\DoNotTrackPlus 2013-10-16 00:37 - 2013-01-02 17:00 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\HpUpdate 2013-10-15 23:54 - 2013-01-04 19:55 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Applian FLV and Media Player 2013-10-15 23:51 - 2013-10-15 23:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\Malwarebytes 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-15 23:51 - 2013-10-15 23:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-15 23:50 - 2013-10-15 23:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\d-ro\Desktop\mbam-setup-1.75.0.1300.exe 2013-10-13 00:56 - 2013-08-29 20:57 - 00000000 ____D C:\Users\d-ro\AppData\Roaming\vlc 2013-10-13 00:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-10-12 22:10 - 2009-07-14 05:45 - 00364288 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-12 22:06 - 2012-03-01 18:34 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-12 22:02 - 2012-05-13 11:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-12 22:02 - 2011-08-12 09:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-12 22:01 - 2013-06-23 01:49 - 01591306 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-10-11 14:41 - 2013-10-11 14:41 - 00000000 ____D C:\be9b450fd522e3262c5851da355f06 2013-10-11 14:41 - 2013-08-15 04:11 - 00000000 ____D C:\Windows\system32\MRT 2013-10-11 14:41 - 2013-01-14 01:38 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-11 14:23 - 2013-10-11 14:22 - 00262144 _____ C:\Windows\Minidump\101113-24164-01.dmp 2013-10-11 14:22 - 2013-04-19 20:13 - 641975984 _____ C:\Windows\MEMORY.DMP 2013-10-11 14:22 - 2012-10-30 19:01 - 00000000 ____D C:\Windows\Minidump 2013-10-10 01:32 - 2012-04-26 10:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-10 01:32 - 2012-04-26 10:28 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-10 01:32 - 2011-08-12 09:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-10-06 12:32 - 2013-10-06 12:32 - 00266288 _____ C:\Windows\Minidump\100613-24055-01.dmp 2013-10-04 22:36 - 2013-09-17 23:30 - 00000000 ____D C:\Users\d-ro\Documents\Anno 1404 2013-10-01 02:27 - 2012-03-01 18:14 - 00000000 ____D C:\ProgramData\CanonIJPLM Some content of TEMP: ==================== C:\Users\d-ro\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe C:\Users\d-ro\AppData\Local\Temp\appshat-distribution.exe C:\Users\d-ro\AppData\Local\Temp\BabylonTB.exe C:\Users\d-ro\AppData\Local\Temp\biclient.exe C:\Users\d-ro\AppData\Local\Temp\BundleSweetIMSetup.exe C:\Users\d-ro\AppData\Local\Temp\Delta.exe C:\Users\d-ro\AppData\Local\Temp\DeltaTB.exe C:\Users\d-ro\AppData\Local\Temp\FLVPlayerSetup.exe C:\Users\d-ro\AppData\Local\Temp\MoviesToolbarSetup_Somoto_9_10_2013.exe C:\Users\d-ro\AppData\Local\Temp\MybabylonTB.exe C:\Users\d-ro\AppData\Local\Temp\OptimizerPro.exe C:\Users\d-ro\AppData\Local\Temp\propsys.dll C:\Users\d-ro\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\d-ro\AppData\Local\Temp\WSSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-21 01:36 ==================== End Of Log ============================ Geändert von doro89 (28.10.2013 um 03:02 Uhr) |
28.10.2013, 12:39 | #22 | |
/// the machine /// TB-Ausbilder | PolizeivirusZitat:
Du sollst FRST auf dem Desktop speichern, nicht aus den temp-Dateien ausführen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.10.2013, 17:41 | #23 |
| Polizeivirus Hallo??? Es geht um den Download den du am 24.10.2013 um 12.16 Uhr gepostet hast, der ging ja nicht!!! |
29.10.2013, 09:38 | #24 | |
/// the machine /// TB-Ausbilder | Polizeivirus es geht um den Teil mit ausführen. Zitat:
Wenn FRST aus nem Temp-Ordner läuft kann ich nix fixen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.10.2013, 16:59 | #25 |
| Polizeivirus Vom Desktop aus klappt der Scan aber nicht dann hängt sich frst immer auf habe ich ja schon gesagt. |
30.10.2013, 10:59 | #26 |
/// the machine /// TB-Ausbilder | Polizeivirus Der Scan ist der Gleiche, egal ob aus den Temps oder vom Desktop Antivirenprogramm mal abgeschaltet vor dem Scan?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
31.10.2013, 16:15 | #27 |
| Polizeivirus Ja habe ich abgeschaltet, und wie gesagt wenn ich es speiichere und vom Desktop aus starte hängt es sich auf, so wie ich auf dem Screen gezeigt habe. |
01.11.2013, 11:17 | #28 |
/// the machine /// TB-Ausbilder | Polizeivirus Dann lade bitte eine alte Version bei Filepony. Wenn das dann auch nicht geht: Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden ).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.11.2013, 01:08 | #29 |
| Polizeivirus Hat auch mit einer älteren Version nicht geklappt. Habe die OTL Logfiles angehängt da nur schon der erste logfile mehr als die erlaubten zeichen lang war. |
03.11.2013, 08:19 | #30 |
/// the machine /// TB-Ausbilder | Polizeivirus Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann keine Anhänge öffnen bzw nur sehr schwer. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |