| |
| |||||||
Log-Analyse und Auswertung: Windows 8: Entfernen von Monster-MarketplaceWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
15.10.2013, 01:37
| #1 |
 |  Windows 8: Entfernen von Monster-Marketplace Hallo liebes Trojaner-board-Team, ich möchte Monster-Marketplace loswerden (der wahrscheinlich schon ein bisschen länger bei mir umherschwirrt) und benötige bitte eure Hilfe. Bin allerdings in PC-Dingen nicht sooo versiert.. also falls was falsch durchgeführt wurde... bitte melden.. Das Problem tritt beim Internet Explorer auf in der Desktop Version. In der IE "App" kann ich relativ problemlos surfen..ist die dann auch gleich mitbetroffen? Ich habe Windows 8, 64-bit, und der PC ist recht neu.. daher liefen leider auch avast antivir und McAfee parallel. (Man bitte es mir nachzusehen..)Soweit ich weiß, konnte avast nichts entdecken. McAfee wohl einen Fund, leider weiß ich nicht recht wie das aufzurufen ist bzw. ob überhaupt ein Log erstellbar ist.. der Rest der Logs mit den jeweiligen Meldungen nachfolgend: Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:10 on 15/10/2013 (Tanii)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Tanii (administrator) on VAIOPRO on 15-10-2013 01:14:21
Running from C:\Users\Tanii\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SmartConnectWork.exe
(McAfee, Inc.) c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(McAfee, Inc.) C:\Program Files\mcafee\Endpoint Encryption for Files and Folders\MfeFfCore.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Dropbox, Inc.) C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Windows Net) C:\Users\Tanii\AppData\Roaming\Windows Net Data\net.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCWebServer.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(McAfee, Inc.) C:\Program Files\mcafee\VirusScan\mcods.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-05-07] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3039984 2013-03-18] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [EPSON Stylus DX3800] - C:\Windows\TEMP\E_SCF07.tmp [59 2013-09-14] ()
HKLM\...\Run: [MfeFfCore] - C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCore.exe [399176 2012-02-13] (McAfee, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-08-06] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-04-23] (McAfee, Inc.)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)
HKLM-x32\...\Run: [MetroTileShortcut] - "C:\Program Files\McAfeeAntiTheft\2.2.279.5\McATUIHost.exe" /IMAT_SHORTCUTS
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
AppInit_DLLs: C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\ImatSup.dll [61688 2013-06-21] ()
Startup: C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Tanii\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKCU - {3B9B5FC4-43F2-46FA-95A2-9B7A5F42730A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
SearchScopes: HKCU - {52954890-5926-4658-BB90-88FB9832B75A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll (Plus HD)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files (x86)\Web Check\WebCheck.dll (Web Check)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
FF Extension: pricealarm - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: FoxyDeal - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF Extension: No Name - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR Extension: (FoxyDeal) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan\6.2.0_0
CHR Extension: (Google Docs) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Web Check) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacechnliklhcacondhhkkfobapdopee\0.1_0
CHR Extension: () - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Chrome In-App Payments service) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Plus-HD-3.8) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0
CHR Extension: (Gmail) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files (x86)\Web Check\WebCheck.crx
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [331776 2012-07-26] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-02] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182248 2013-03-14] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-02] (Intel Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-08-06] (McAfee, Inc.)
R2 McATScheduler; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [334760 2012-12-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-02-28] (McAfee, Inc.)
R2 MfeFfCoreService; C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe [205128 2012-02-13] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-02] ()
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-04] (Sony Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-09-06] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-14] (soft Xpansion)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-02] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [104960 2012-07-07] (ASIX Electronics Corp.)
R3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [30720 2013-05-23] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-03-14] ()
R1 ImatDisk; C:\Windows\system32\DRIVERS\ImatDisk.sys [16360 2013-06-21] (McAfee, Inc.)
R1 ImatDmk; C:\Windows\System32\DRIVERS\ImatDmk.sys [505576 2013-06-21] (McAfee, Inc.)
R1 ImatDs; C:\Windows\System32\DRIVERS\ImatDs.sys [206424 2013-06-21] (McAfee, Inc.)
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-03-14] ()
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [97368 2013-04-03] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-03-14] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-04-02] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
R1 MfeEEFF; C:\Windows\System32\DRIVERS\MfeEEFF.sys [307888 2013-06-21] (McAfee, Inc.)
R1 MfeEEFFV; C:\Windows\System32\DRIVERS\MfeEEFFV.sys [67880 2013-06-21] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [337120 2013-02-18] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95856 2013-02-18] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3646432 2013-08-01] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-18] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-10-14] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:07 - 2013-10-15 01:10 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:28 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-10-14 12:26 - 2013-10-14 12:29 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:07 - 2013-10-14 12:08 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-13 22:14 - 2013-10-14 00:12 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 21:29 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-10-13 21:29 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-10-13 21:28 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-13 21:28 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-10-13 21:28 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-13 21:28 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-10-13 21:28 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-10-13 21:27 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-10-13 21:27 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-10-13 21:27 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-13 21:27 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-13 21:27 - 2013-07-31 01:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-10-13 21:27 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-10-13 21:27 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-10-11 00:27 - 2013-10-11 00:28 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 08:08 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 08:08 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 08:07 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 08:07 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-10 08:06 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 08:06 - 2013-07-02 00:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 08:06 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-10 08:06 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 08:06 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 08:06 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 08:05 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 08:05 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-10 08:05 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-10-10 08:05 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 08:05 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 08:05 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-10-10 08:05 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 08:04 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 08:04 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-10 08:04 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-10 08:04 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-10 08:04 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-10 08:04 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 08:04 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 08:04 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 08:04 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-27 00:16 - 2013-10-15 00:16 - 00001306 _____ C:\Windows\Tasks\Plus-HD-3.8-updater.job
2013-09-27 00:16 - 2013-10-15 00:16 - 00001212 _____ C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job
2013-09-27 00:16 - 2013-10-15 00:16 - 00001110 _____ C:\Windows\Tasks\Plus-HD-3.8-enabler.job
2013-09-27 00:16 - 2013-09-27 00:16 - 00004310 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-updater
2013-09-27 00:16 - 2013-09-27 00:16 - 00004216 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader
2013-09-27 00:16 - 2013-09-27 00:16 - 00004114 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-enabler
2013-09-27 00:15 - 2013-10-15 00:15 - 00001920 _____ C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job
2013-09-27 00:15 - 2013-10-15 00:15 - 00001844 _____ C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job
2013-09-27 00:15 - 2013-09-27 00:16 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2013-09-27 00:11 - 2013-09-27 00:12 - 00000000 ____D C:\Users\Tanii\AppData\Local\DownloadGuide
2013-09-26 19:24 - 2013-10-01 21:48 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:33 - 2013-09-25 23:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:04 - 2013-09-25 23:12 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 23:19 - 2013-09-25 00:21 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte *****.xlsx
2013-09-24 21:01 - 2013-09-24 21:07 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-21 10:33 - 2013-10-14 22:32 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 23:03 - 2013-10-14 00:30 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-09-19 21:50 - 2013-09-20 21:14 - 00000000 ____D C:\Program Files\office.tmp
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:55 - 2012-05-28 10:28 - 00197264 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00505576 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDmk.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00307888 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFF.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00206424 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDs.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00067880 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFFV.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00016360 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDisk.sys
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-09-19 00:20 - 2013-10-14 12:03 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:15 - 2013-09-19 00:17 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
2013-09-15 22:55 - 2013-09-15 22:55 - 00307228 _____ C:\Users\Tanii\Documents\Auftragsbestätigung_Office_2013.oxps
2013-09-15 21:32 - 2013-09-21 13:59 - 00000000 ____D C:\Users\Tanii\Downloads\SONY Updates
2013-09-15 20:34 - 2013-10-14 21:58 - 00000000 ____D C:\Users\Tanii\Documents\Studium
2013-09-15 20:34 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Bewerbung
==================== One Month Modified Files and Folders =======
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:10 - 2013-10-15 01:07 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:07 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii
2013-10-15 01:04 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Dropbox
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-15 01:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-15 01:01 - 2013-08-15 02:50 - 01557321 _____ C:\Windows\WindowsUpdate.log
2013-10-15 00:54 - 2013-08-20 20:44 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 00:35 - 2013-08-26 23:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-15 00:16 - 2013-09-27 00:16 - 00001306 _____ C:\Windows\Tasks\Plus-HD-3.8-updater.job
2013-10-15 00:16 - 2013-09-27 00:16 - 00001212 _____ C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job
2013-10-15 00:16 - 2013-09-27 00:16 - 00001110 _____ C:\Windows\Tasks\Plus-HD-3.8-enabler.job
2013-10-15 00:15 - 2013-09-27 00:15 - 00001920 _____ C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job
2013-10-15 00:15 - 2013-09-27 00:15 - 00001844 _____ C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job
2013-10-14 22:55 - 2013-08-20 17:10 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-229403605-4087374091-3052702-1001
2013-10-14 22:40 - 2013-08-15 03:48 - 00753134 _____ C:\Windows\system32\perfh007.dat
2013-10-14 22:40 - 2013-08-15 03:48 - 00155826 _____ C:\Windows\system32\perfc007.dat
2013-10-14 22:40 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-14 22:35 - 2013-08-15 03:35 - 00002173 _____ C:\Users\Public\Desktop\Intel Anti-Theft Service.lnk
2013-10-14 22:33 - 2013-08-21 23:18 - 00000000 ___RD C:\Users\Tanii\Dropbox
2013-10-14 22:33 - 2013-08-20 20:44 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-14 22:32 - 2013-09-21 10:33 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-10-14 22:32 - 2013-08-15 04:26 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2013-10-14 22:32 - 2012-08-03 04:22 - 00214196 _____ C:\Windows\PFRO.log
2013-10-14 22:32 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-14 22:32 - 2012-07-26 07:26 - 00524288 ___SH C:\Windows\system32\config\BBI
2013-10-14 22:01 - 2013-08-15 03:08 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 21:58 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Studium
2013-10-14 20:45 - 2013-08-26 22:58 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE26D711-8C71-48AB-AB84-59DF11B0F137}
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 16:26 - 2013-08-27 20:29 - 946587032 _____ C:\Windows\MEMORY.DMP
2013-10-14 16:26 - 2013-08-27 20:29 - 00000000 ____D C:\Windows\Minidump
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:29 - 2013-10-14 12:26 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:29 - 2013-09-13 19:15 - 00000000 ____D C:\Program Files\Google
2013-10-14 12:29 - 2013-08-20 20:44 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:08 - 2013-10-14 12:07 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-10-14 00:30 - 2013-09-20 23:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-10-14 00:14 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-14 00:14 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-14 00:13 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-10-14 00:13 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2013-10-14 00:12 - 2013-10-13 22:14 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 22:07 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-10-13 19:57 - 2013-08-22 22:31 - 00000000 ____D C:\Users\Tanii\AppData\Local\CrashDumps
2013-10-13 19:56 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-10-13 15:58 - 2013-08-21 23:18 - 00000979 _____ C:\Users\Tanii\Desktop\Dropbox.lnk
2013-10-13 15:58 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-13 08:03 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-11 00:53 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii\AppData\Local\Packages
2013-10-11 00:28 - 2013-10-11 00:27 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 22:02 - 2013-08-21 22:49 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 22:00 - 2013-08-21 22:49 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 04:56 - 2013-08-20 20:46 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-10 04:35 - 2013-08-26 23:39 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-10-05 00:18 - 2013-08-20 20:44 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-03 22:17 - 2012-07-26 09:21 - 00030518 _____ C:\Windows\setupact.log
2013-10-02 03:38 - 2012-07-26 10:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2012-07-26 10:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 21:48 - 2013-09-26 19:24 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-27 00:17 - 2013-08-26 22:08 - 00000000 ____D C:\Users\Tanii\Downloads\Programme
2013-09-27 00:16 - 2013-09-27 00:16 - 00004310 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-updater
2013-09-27 00:16 - 2013-09-27 00:16 - 00004216 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader
2013-09-27 00:16 - 2013-09-27 00:16 - 00004114 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-enabler
2013-09-27 00:16 - 2013-09-27 00:15 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2013-09-27 00:14 - 2013-09-14 23:19 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Windows Net Data
2013-09-27 00:12 - 2013-09-27 00:11 - 00000000 ____D C:\Users\Tanii\AppData\Local\DownloadGuide
2013-09-26 23:59 - 2013-09-14 23:21 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 19:01 - 2013-08-20 20:44 - 00000000 ____D C:\Users\Tanii\AppData\Local\Google
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:32 - 2013-09-25 23:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-25 23:12 - 2013-09-25 23:04 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:21 - 2013-09-24 23:19 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte *****.xlsx
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 21:07 - 2013-09-24 21:01 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-23 01:28 - 2013-10-10 08:05 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-10 08:05 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-10 08:06 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-21 13:59 - 2013-09-15 21:32 - 00000000 ____D C:\Users\Tanii\Downloads\SONY Updates
2013-09-21 13:54 - 2013-08-15 03:49 - 00000000 ____D C:\Program Files\Sony
2013-09-21 13:33 - 2013-08-15 03:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 21:57 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-09-20 21:14 - 2013-09-19 21:50 - 00000000 ____D C:\Program Files\office.tmp
2013-09-20 20:31 - 2013-08-15 03:35 - 00000000 ____D C:\Program Files\McAfeeEx
2013-09-20 20:31 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\mcafee
2013-09-19 22:41 - 2013-09-14 23:20 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Google
2013-09-19 21:54 - 2013-08-15 03:20 - 00000000 ____D C:\ProgramData\McAfee
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:51 - 2012-07-26 10:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:17 - 2013-09-19 00:15 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
2013-09-15 22:55 - 2013-09-15 22:55 - 00307228 _____ C:\Users\Tanii\Documents\Auftragsbestätigung_Office_2013.oxps
2013-09-15 22:45 - 2013-08-20 20:20 - 00000000 ____D C:\Update
2013-09-15 21:46 - 2013-08-15 03:23 - 00001124 _____ C:\Windows\DirectX.log
2013-09-15 21:39 - 2013-08-15 03:20 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-09-15 21:14 - 2013-08-20 17:12 - 00000000 ____D C:\Users\Tanii\Documents\Sony PMB
2013-09-15 20:34 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Bewerbung
Some content of TEMP:
====================
C:\Users\Tanii\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (1).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (2).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-de.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 22:00
==================== End Of Log ============================
--- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Tanii at 2013-10-15 01:16:50
Running from C:\Users\Tanii\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) MUI (x32 Version: 11.0.05)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Azteca (x32 Version: 2.2.0.97)
Behind The Reflection 2: Witch's Revenge (x32 Version: 3.0.2.32)
Bejeweled 3 (x32 Version: 2.2.0.98)
Build-a-lot: On Vacation (x32 Version: 2.2.0.110)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Cut the Rope (x32 Version: 3.0.2.38)
Dropbox (HKCU Version: 2.4.2)
Einstellungen für VAIO Media Server (Version: 1.1.0.02220)
Enchanted Cavern 2 (x32 Version: 2.2.0.110)
EPSON Scan (x32)
EPSON-Drucker-Software
ESDL (x32 Version: 1.0.0)
FATE (x32 Version: 2.2.0.97)
FDUx86 (x32 Version: 1.0.0)
Foxit Reader (x32 Version: 6.0.6.722)
FoxyDeal (x32 Version: 1.1.0)
Google Chrome (x32 Version: 30.0.1599.69)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.153)
Heroes of Hellas 3: Athens (x32 Version: 3.0.2.32)
Intel Anti-Theft Service (Version: 2.3.199.2)
Intel AppUp(R) center (x32 Version: 3.8.0.41800.66)
Intel Collaborative Processor Performance Control (x32 Version: 1.0.0.1009)
Intel(R) Management Engine Components (x32 Version: 9.5.0.1428)
Intel(R) PRO/Wireless Driver (Version: 16.01.3000.0512)
Intel(R) Processor Graphics (x32 Version: 9.18.10.3071)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 16.1.1.0084)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 3.1.1306.0354)
Intel(R) Rapid Storage Technology (Version: 12.5.0.1066)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463)
Intel(R) Smart Connect Technology 4.1 x64 (Version: 4.1.40.2143)
Intel(R) Update Manager (x32 Version: 1.6.0.56)
Intel(R) WiDi (Version: 4.1.14.0)
Intel® PROSet/Wireless Software (x32 Version: 16.1.3)
Intel® PROSet/Wireless WiFi Software (Version: 16.01.3000.0254)
Intel® Trusted Connect Service Client (Version: 1.27.798.1)
Java 7 Update 13 (64-bit) (Version: 7.0.130)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
Luxor HD (x32 Version: 2.2.0.110)
Mahjongg Artifacts (x32 Version: 2.2.0.110)
McAfee Internet Security (x32 Version: 12.8.750)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4535.1511)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
My Kingdom for the Princess 3 (x32 Version: 2.2.0.110)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
NXPProximityInstaller (x32 Version: 6.1.1.0)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1511)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1511)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1511)
PDF24 Creator 5.7.0 (x32)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayMemories Home (x32 Version: 7.0.03.04240)
Plus-HD-3.8 (x32 Version: 1.27.153.11)
Polar Bowler (x32 Version: 2.2.0.97)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6895)
Realtek PCIE Card Reader (x32 Version: 6.2.9200.28140)
Restore (x32 Version: 1.0.0)
Shared C Run-time for x64 (Version: 10.0.0)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Synaptics Pointing Device Driver (Version: 16.4.0.1)
Update Installer for WildTangent Games App (x32)
Vacation Quest™ - Australia (x32 Version: 3.0.2.32)
VAIO - Xperia Link (x32 Version: 1.2.0.02040)
VAIO BIOS Data Transfer Utility (x32 Version: 1.0.0.02050)
VAIO Care (Version: 8.2.0.15030)
VAIO Care Recovery (Version: 1.0.2.08020)
VAIO Care-Hardwarediagnose-Plugin (x32 Version: 4.8.0.13250)
VAIO Control Center (x32 Version: 6.2.0.04110)
VAIO Data Restore Tool (x32 Version: 1.11.0.13250)
VAIO Easy Connect (x32 Version: 8.2.0.14170)
VAIO Gesture Control (x32 Version: 2.2.0.01230)
VAIO Image Optimizer (x32 Version: 3.1.00.14260)
VAIO Image Optimizer (x32 Version: 3.2.00.07040)
VAIO Improvement (x32 Version: 2.2.0.01240)
VAIO Movie Creator (x32 Version: 4.1.01.15140)
VAIO Movie Creator (x32 Version: 4.2.00.07040)
VAIO Sample Music (x32 Version: 1.0.0.03051)
VAIO Update (x32 Version: 6.3.0.08010)
VAIO*CPU-Lüfterdiagnose (x32 Version: 1.2.0.03050)
VAIO-Support für Übertragungen (x32 Version: 1.9.0.11060)
VCCx64 (Version: 1.0.0)
VCCx86 (x32 Version: 1.0.0)
VHD (x32 Version: 1.0.0)
Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (x32 Version: 1.0.0)
VU5x64 (Version: 1.1.0)
VU5x86 (x32 Version: 1.1.0)
VUx64 (Version: 1.0.0)
VUx86 (x32 Version: 1.0.0)
VWSTx86 (x32 Version: 1.0.0)
Web Check (x32)
WildTangent Games App (x32 Version: 4.0.10.5)
WildTangent-Spiele (x32 Version: 1.0.4.0)
Windows Utils (x32)
XperiaLinkx86 (x32 Version: 1.0.0)
Youda Jewel Shop (x32 Version: 3.0.2.32)
==================== Restore Points =========================
25-09-2013 21:27:55 Installed Java 7 Update 40
01-10-2013 16:54:23 Windows-Sicherung
10-10-2013 01:59:29 Geplanter Prüfpunkt
13-10-2013 19:51:50 Windows Update
14-10-2013 20:00:37 Free Pdf Perfect Prereq
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {011252F9-1BB1-41CF-BD2C-771CD09637A5} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {08B01E23-DB12-4D79-A403-CE398CD79343} - System32\Tasks\Plus-HD-3.8-firefoxinstaller => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe [2013-09-27] (Plus HD)
Task: {0AAB6B8F-6624-4B5A-BF85-E8CE82EA736A} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-04-03] (Sony Corporation)
Task: {0C12FA06-D1A3-4544-8721-44E09ADD69B1} - System32\Tasks\Plus-HD-3.8-chromeinstaller => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe [2013-09-27] (Plus HD)
Task: {10432606-2D3D-41FC-B003-FC8E154C12BB} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {13B4AD3F-1FE0-4D51-87E1-91FBDE565F25} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-03-08] (Intel Corporation)
Task: {1FB22EB1-70C0-4E7E-BCF5-3D681D190CED} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-08-01] (Sony Corporation)
Task: {2249EE50-5A0E-4A49-B6F5-FAFF0E66075B} - System32\Tasks\Plus-HD-3.8-updater => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe [2013-09-27] (Plus HD)
Task: {2744A06E-E308-49FA-A2A1-A409BBB28C23} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {2B00090A-8AA2-49C0-8FBE-81A8430C16E3} - System32\Tasks\Plus-HD-3.8-enabler => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe [2013-09-27] (Plus HD)
Task: {40D50E6D-30FC-41BF-9EEF-43A9206EB310} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2013-01-24] (Sony Corporation)
Task: {4236B925-8503-428C-9EF0-EAB69BECF8AF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-20] (Google Inc.)
Task: {479AA891-D66A-4258-8570-0AF4711B1532} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {4A6FB057-E2F3-43F5-84DE-FA05EE80FF2B} - System32\Tasks\Sony Corporation\VAIO Hardware Diagnostics\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2013-01-25] (Sony Corporation)
Task: {4F6A0C62-85C3-4676-A815-E954AAD615E5} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-03-08] (Intel Corporation)
Task: {5A6608D9-46F9-481F-9DE7-3652F65D91D8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-20] (Google Inc.)
Task: {5F3D40C9-823D-497F-AEE1-8E229987B654} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {77EF70FD-F365-4BC4-98F1-902BA8D31A09} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-10-10] (Microsoft Corporation)
Task: {7A021FF8-E242-432F-8F2B-10C23BB99F90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {809F3A18-22DE-493D-9736-1ABF9382AB33} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2013-02-04] (Sony Corporation)
Task: {8846EC8A-EB74-4CFA-A8C6-F62212604E32} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {8F0B17E0-98AF-443E-B007-4F2352CA1179} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {914D8D40-10A7-4F13-9E2A-E3D1D5912417} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-09-06] (Microsoft Corporation)
Task: {AE9027D4-4E17-4C6D-9793-3D961086F131} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {B0B1C6DC-0F82-41FE-A76D-D9A82436FBBF} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-03-15] (Sony Corporation)
Task: {BDBA5D36-0DBF-46EC-91F1-38C664329507} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\SONY\VAIO Update\ShellExeProxy.exe [2013-08-01] (Sony Corporation)
Task: {C03F5F54-0AF5-4BBB-B935-1B17A09EE0AF} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {C225419F-0F66-4BD5-8688-C5758D527D85} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-08-01] (Sony Corporation)
Task: {C9B3F293-BF3E-48FE-B289-1546F78764A8} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient
Task: {D1991557-0D85-4261-9F23-B0AA5B98F775} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-04-03] (Sony Corporation)
Task: {D97E0E78-EEA1-4081-B180-CA588535628A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {DE9DDAA5-474E-4129-8EDC-BE6627BE2268} - System32\Tasks\Plus-HD-3.8-codedownloader => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe [2013-09-27] (Plus HD)
Task: {E14ED3F1-88E1-4BAB-A846-80324BF8D0D8} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-03-15] (Sony Corporation)
Task: {E1EC5470-1892-4FAB-B386-EFDD71AB1759} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2013-01-23] (Sony Corporation)
Task: {EC8E1A83-7555-4838-9523-61C659549E9F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-10-10] (Microsoft Corporation)
Task: {F3FA862C-05E4-4207-BC00-F3168A2305FE} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: {FB1E9582-F807-4C6C-B631-47955C02C24C} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-enabler.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-updater.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe
==================== Loaded Modules (whitelisted) =============
2013-10-14 16:29 - 2013-10-14 10:46 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101400\algo.dll
2013-08-15 03:26 - 2013-03-28 01:53 - 00127464 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\iSCTConnect.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Tanii\AppData\Roaming\Dropbox\bin\libcef.dll
2013-08-15 03:14 - 2013-04-02 15:02 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-08-15 03:26 - 2013-01-23 10:01 - 00876544 _____ () C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\cv110.dll
2013-08-15 03:26 - 2013-01-23 10:00 - 00958464 _____ () C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\cxcore110.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Program Files:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\Program Files (x86):IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\Program Files (x86)\McAfee:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Adobe:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Application Data:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\AVAST Software:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\eBay:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\EPSON:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Freemium:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Google:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Intel:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Intel(R) Update Manager:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Internet Content Filter:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\iolo:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\McAfee:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Microsoft:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Mozilla:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Oracle:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Package Cache:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\PRICache:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\regid.1991-06.com.microsoft:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Roaming:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Sony Corporation:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Start Menu:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Startmenü:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Sun:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Templates:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\Vorlagen:IMAT__DS_DIR_HDR
AlternateDataStreams: C:\ProgramData\WildTangent:IMAT__DS_DIR_HDR
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/14/2013 11:51:03 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3dec
Startzeit: 01cec9271b954e3c
Endzeit: 62
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: b51aaf46-351a-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 11:50:26 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 37c8
Startzeit: 01cec924917329c5
Endzeit: 47
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 9efe1154-351a-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 11:49:51 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 40e8
Startzeit: 01cec92740922bbd
Endzeit: 225
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 88f99a05-351a-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 11:49:26 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3614
Startzeit: 01cec92549fb69e0
Endzeit: 31
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 7a9f2c9f-351a-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 11:48:24 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 36d4
Startzeit: 01cec921de03d3b4
Endzeit: 81
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 551ecf49-351a-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 11:30:13 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3ae0
Startzeit: 01cec9246d35b436
Endzeit: 62
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: cb930208-3517-11e3-bea9-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 09:59:47 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2764
Startzeit: 01cec917e05363db
Endzeit: 23
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 29c2bd62-350b-11e3-bea8-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 09:59:22 PM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3698
Startzeit: 01cec917cc8fba37
Endzeit: 16
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID: 1ac47246-350b-11e3-bea8-5c514f2a7758
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/14/2013 08:26:26 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (10/13/2013 07:57:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.2.9200.16628, Zeitstempel: 0x51a94434
Name des fehlerhaften Moduls: twinui.dll, Version: 6.2.9200.16604, Zeitstempel: 0x5184a60b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000097c3d
ID des fehlerhaften Prozesses: 0x1364
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5
System errors:
=============
Error: (10/14/2013 10:32:48 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (10/14/2013 10:32:38 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: {78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
Error: (10/14/2013 10:32:38 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: {78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
Error: (10/14/2013 10:11:36 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 10:04:38 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 10:03:21 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 10:03:00 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 09:59:48 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 09:59:23 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/14/2013 09:58:51 PM) (Source: DCOM) (User: VAIOPRO)
Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}VaioProTaniiS-1-5-21-229403605-4087374091-3052702-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Microsoft Office Sessions:
=========================
Error: (10/14/2013 11:51:03 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.165373dec01cec9271b954e3c62C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb51aaf46-351a-11e3-bea9-5c514f2a7758
Error: (10/14/2013 11:50:26 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1653737c801cec924917329c547C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE9efe1154-351a-11e3-bea9-5c514f2a7758
Error: (10/14/2013 11:49:51 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1653740e801cec92740922bbd225C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE88f99a05-351a-11e3-bea9-5c514f2a7758
Error: (10/14/2013 11:49:26 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.16537361401cec92549fb69e031C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE7a9f2c9f-351a-11e3-bea9-5c514f2a7758
Error: (10/14/2013 11:48:24 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1653736d401cec921de03d3b481C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE551ecf49-351a-11e3-bea9-5c514f2a7758
Error: (10/14/2013 11:30:13 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.165373ae001cec9246d35b43662C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEcb930208-3517-11e3-bea9-5c514f2a7758
Error: (10/14/2013 09:59:47 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.16537276401cec917e05363db23C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE29c2bd62-350b-11e3-bea8-5c514f2a7758
Error: (10/14/2013 09:59:22 PM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.16537369801cec917cc8fba3716C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE1ac47246-350b-11e3-bea8-5c514f2a7758
Error: (10/14/2013 08:26:26 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (10/13/2013 07:57:17 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.2.9200.1662851a94434twinui.dll6.2.9200.166045184a60bc00000050000000000097c3d136401cec83d95fa79fcC:\Windows\Explorer.EXEC:\Windows\System32\twinui.dlle5602470-3430-11e3-bea6-5c514f2a7758
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 8098.88 MB
Available physical RAM: 4822.42 MB
Total Pagefile: 16290.88 MB
Available Pagefile: 13014.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:212.62 GB) (Free:128.83 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 238 GB) (Disk ID: DCF7AECC)
Partition: GPT Partition Type
==================== End Of Log ============================
und GMER, hier gab es allerdings ein paar Problemchen: Fehlermeldung Prozess kann nicht auf Datei zugreifen, da Sie von einem anderen Programm verwendet wird: (2x) - C:\windows\system32\config\system - C:\users\Tanii\ntuser.dat Beim ersten Scan machte Windows einen Neustart mit Fehlermeldung: DPC_WATCHDOG_VIOLATION 2. Scan: Ergebnis im Logzip. aber Fehlermeldungen wie oben Hinweis: Ich habe ein McAfee Anti-Theft laufen, kann das die Ursache sein oder was muss ich noch beenden? Danke im Voraus. Taniix3 Geändert von Taniix3 (15.10.2013 um 02:05 Uhr) Grund: Hatte vorher falschen Gmer-Log eingefügt |
|
15.10.2013, 05:49
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 8: Entfernen von Monster-Marketplace hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
15.10.2013, 21:36
| #3 |
| | Windows 8: Entfernen von Monster-Marketplace Hey, danke für die zügige Antwort Schrauber.
__________________Hier die benötigten Logs: MBAM Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.15.04 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16721 Tanii :: VAIOPRO [Administrator] Schutz: Aktiviert 15.10.2013 16:43:32 mbam-log-2013-10-15 (16-43-32).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 201693 Laufzeit: 5 Minute(n), 51 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 13 HKCR\CLSID\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{44444444-4444-4444-4444-440344904430} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{55555555-5555-5555-5555-550355905530} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.BHO.1 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311901130} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.BHO (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CrossriderApp0039030.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\Program Files (x86)\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 25 C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Tanii\AppData\Local\DownloadGuide\Offers\plus-hd-3-8.exe (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-enabler.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\Plus-HD-3.8-updater.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\39030.crx (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\39030.xpi (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\background.html (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Installer.log (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bg.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-helper.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8.ico (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\Uninstall.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Plus-HD-3.8\utils.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.007 - Bericht erstellt am 15/10/2013 um 17:18:07
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Tanii - VAIOPRO
# Gestartet von : C:\Users\Tanii\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\FoxyDeal
Ordner Gelöscht : C:\Users\Tanii\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Tanii\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan
Datei Gelöscht : C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
Datei Gelöscht : C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\foxydeal.sqlite
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKCU\Software\FoxyDeal
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\AppDataLow\FoxyDeal
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FoxyDeal
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.backgroundjs", "\n\n/*****************************************************************************[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.js", "\n\n /************************************************************************************\[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_13.name", "CrossriderAppUtils");
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_14.name", "CrossriderUtils");
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_78.name", "CrossriderInfo");
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
Zeile gelöscht : user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1415c5a1f1e4a4f1f0af151c09722d24");
-\\ Google Chrome v30.0.1599.69
[ Datei : C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [8545 octets] - [15/10/2013 17:16:16]
AdwCleaner[S0].txt - [8216 octets] - [15/10/2013 17:18:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8276 octets] ##########
[/CODE] JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 8 x64
Ran by Tanii on 15.10.2013 at 17:32:10,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322902230}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366906630}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322902230}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660366906630}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366906630}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366906630}
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Tanii\AppData\Roaming\mozilla\firefox\profiles\tg1rjaxj.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
Successfully deleted the following from C:\Users\Tanii\AppData\Roaming\mozilla\firefox\profiles\tg1rjaxj.default\prefs.js
user_pref("extensions.ac17236e8fd6644bcaeef1e00981cbb640a4ee0fe53564fd3b37c5cd5671a315ccom39030.39030.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.value", "%22var%20adsDe
Emptied folder: C:\Users\Tanii\AppData\Roaming\mozilla\firefox\profiles\tg1rjaxj.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.10.2013 at 21:23:14,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Tanii (administrator) on VAIOPRO on 15-10-2013 22:21:38
Running from C:\Users\Tanii\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SmartConnectWork.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE
(McAfee, Inc.) c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(McAfee, Inc.) C:\Program Files\mcafee\Endpoint Encryption for Files and Folders\MfeFfCore.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Dropbox, Inc.) C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Windows\system32\wwahost.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCWebServer.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-05-07] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3039984 2013-03-18] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [EPSON Stylus DX3800] - C:\Windows\TEMP\E_SCF07.tmp [59 2013-09-14] ()
HKLM\...\Run: [MfeFfCore] - C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCore.exe [399176 2012-02-13] (McAfee, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-08-06] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-04-23] (McAfee, Inc.)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)
HKLM-x32\...\Run: [MetroTileShortcut] - "C:\Program Files\McAfeeAntiTheft\2.2.279.5\McATUIHost.exe" /IMAT_SHORTCUTS
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
AppInit_DLLs: C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\ImatSup.dll [61688 2013-06-21] ()
Startup: C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - DefaultScope {3B9B5FC4-43F2-46FA-95A2-9B7A5F42730A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
SearchScopes: HKCU - {3B9B5FC4-43F2-46FA-95A2-9B7A5F42730A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
SearchScopes: HKCU - {52954890-5926-4658-BB90-88FB9832B75A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files (x86)\Web Check\WebCheck.dll (Web Check)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
FireFox:
========
FF ProfilePath: C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: FoxyDeal - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF Extension: No Name - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Web Check) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacechnliklhcacondhhkkfobapdopee\0.1_0
CHR Extension: () - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Chrome In-App Payments service) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Plus-HD-3.8) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0
CHR Extension: (Gmail) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files (x86)\Web Check\WebCheck.crx
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [331776 2012-07-26] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-02] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182248 2013-03-14] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-02] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-08-06] (McAfee, Inc.)
R2 McATScheduler; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [334760 2012-12-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-02-28] (McAfee, Inc.)
R2 MfeFfCoreService; C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe [205128 2012-02-13] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-02] ()
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-04] (Sony Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-09-06] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-14] (soft Xpansion)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-02] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [104960 2012-07-07] (ASIX Electronics Corp.)
R3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [30720 2013-05-23] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-03-14] ()
R1 ImatDisk; C:\Windows\system32\DRIVERS\ImatDisk.sys [16360 2013-06-21] (McAfee, Inc.)
R1 ImatDmk; C:\Windows\System32\DRIVERS\ImatDmk.sys [505576 2013-06-21] (McAfee, Inc.)
R1 ImatDs; C:\Windows\System32\DRIVERS\ImatDs.sys [206424 2013-06-21] (McAfee, Inc.)
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-03-14] ()
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [97368 2013-04-03] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-03-14] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-04-02] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
R1 MfeEEFF; C:\Windows\System32\DRIVERS\MfeEEFF.sys [307888 2013-06-21] (McAfee, Inc.)
R1 MfeEEFFV; C:\Windows\System32\DRIVERS\MfeEEFFV.sys [67880 2013-06-21] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [337120 2013-02-18] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95856 2013-02-18] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3646432 2013-08-01] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-18] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-10-15] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-15 21:25 - 2013-10-15 21:25 - 00001935 _____ C:\Users\Tanii\Desktop\JRT2.txt
2013-10-15 21:23 - 2013-10-15 21:23 - 00001935 _____ C:\Users\Tanii\Desktop\JRT.txt
2013-10-15 17:32 - 2013-10-15 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 17:28 - 2013-10-15 17:28 - 01032220 _____ (Thisisu) C:\Users\Tanii\Desktop\JRT.exe
2013-10-15 17:26 - 2013-10-15 17:26 - 00008372 _____ C:\Users\Tanii\Desktop\AdwCleaner[S0].txt
2013-10-15 17:16 - 2013-10-15 17:19 - 00000000 ____D C:\AdwCleaner
2013-10-15 17:13 - 2013-10-15 17:13 - 01048960 _____ C:\Users\Tanii\Desktop\adwcleaner.exe
2013-10-15 09:12 - 2013-10-15 09:12 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 09:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-15 09:03 - 2013-10-15 09:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tanii\Desktop\mbam-setup-1.75.0.1300.exe
2013-10-15 02:50 - 2013-10-15 02:50 - 00033664 _____ C:\Users\Tanii\Desktop\Logfiles.zip
2013-10-15 02:47 - 2013-10-15 02:47 - 01110476 _____ C:\Users\Tanii\Downloads\7z920.exe
2013-10-15 02:47 - 2013-10-15 02:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-15 01:47 - 2013-10-15 01:47 - 00686159 _____ C:\Users\Tanii\Desktop\Gmer.txt
2013-10-15 01:42 - 2013-10-15 01:42 - 00282008 _____ C:\Windows\Minidump\101513-4875-01.dmp
2013-10-15 01:20 - 2013-10-15 01:20 - 00377856 _____ C:\Users\Tanii\Desktop\cn3mh19y.exe
2013-10-15 01:16 - 2013-10-15 01:18 - 00030452 _____ C:\Users\Tanii\Desktop\Addition.txt
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:07 - 2013-10-15 01:10 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:28 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-10-14 12:26 - 2013-10-14 12:29 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:07 - 2013-10-14 12:08 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-13 22:14 - 2013-10-14 00:12 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 21:29 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-10-13 21:29 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-10-13 21:28 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-13 21:28 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-10-13 21:28 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-13 21:28 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-10-13 21:28 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-10-13 21:27 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-10-13 21:27 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-10-13 21:27 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-13 21:27 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-13 21:27 - 2013-07-31 01:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-10-13 21:27 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-10-13 21:27 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-10-11 00:27 - 2013-10-11 00:28 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 08:08 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 08:08 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 08:07 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 08:07 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-10 08:06 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 08:06 - 2013-07-02 00:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 08:06 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-10 08:06 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 08:06 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 08:06 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 08:05 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 08:05 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-10 08:05 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-10-10 08:05 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 08:05 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 08:05 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-10-10 08:05 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 08:04 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 08:04 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-10 08:04 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-10 08:04 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-10 08:04 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-10 08:04 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 08:04 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 08:04 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 08:04 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-26 19:24 - 2013-10-01 21:48 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:33 - 2013-09-25 23:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:04 - 2013-09-25 23:12 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 23:19 - 2013-09-25 00:21 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte Tanja Schmitt.xlsx
2013-09-24 21:01 - 2013-09-24 21:07 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-21 10:33 - 2013-10-15 22:11 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 23:03 - 2013-10-14 00:30 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-09-19 21:50 - 2013-09-20 21:14 - 00000000 ____D C:\Program Files\office.tmp
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:55 - 2012-05-28 10:28 - 00197264 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00505576 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDmk.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00307888 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFF.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00206424 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDs.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00067880 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFFV.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00016360 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDisk.sys
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-09-19 00:20 - 2013-10-14 12:03 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:15 - 2013-09-19 00:17 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
2013-09-15 22:55 - 2013-09-15 22:55 - 00307228 _____ C:\Users\Tanii\Documents\Auftragsbestätigung_Office_2013.oxps
2013-09-15 21:32 - 2013-09-21 13:59 - 00000000 ____D C:\Users\Tanii\Downloads\SONY Updates
2013-09-15 20:34 - 2013-10-14 21:58 - 00000000 ____D C:\Users\Tanii\Documents\Studium
2013-09-15 20:34 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Bewerbung
==================== One Month Modified Files and Folders =======
2013-10-15 22:16 - 2013-08-15 03:48 - 00753134 _____ C:\Windows\system32\perfh007.dat
2013-10-15 22:16 - 2013-08-15 03:48 - 00155826 _____ C:\Windows\system32\perfc007.dat
2013-10-15 22:16 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-15 22:14 - 2013-08-15 03:35 - 00002173 _____ C:\Users\Public\Desktop\Intel Anti-Theft Service.lnk
2013-10-15 22:12 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Dropbox
2013-10-15 22:12 - 2013-08-20 20:44 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 22:11 - 2013-09-21 10:33 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-10-15 22:11 - 2013-08-15 04:26 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2013-10-15 22:11 - 2012-08-03 04:22 - 00237990 _____ C:\Windows\PFRO.log
2013-10-15 22:11 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-15 21:38 - 2013-08-15 02:50 - 01655421 _____ C:\Windows\WindowsUpdate.log
2013-10-15 21:35 - 2013-08-26 23:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-15 21:25 - 2013-10-15 21:25 - 00001935 _____ C:\Users\Tanii\Desktop\JRT2.txt
2013-10-15 21:23 - 2013-10-15 21:23 - 00001935 _____ C:\Users\Tanii\Desktop\JRT.txt
2013-10-15 21:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-15 20:59 - 2013-08-20 20:44 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-15 19:35 - 2013-08-20 21:20 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Intel WiDi
2013-10-15 17:32 - 2013-10-15 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 17:29 - 2013-08-21 23:18 - 00000000 ___RD C:\Users\Tanii\Dropbox
2013-10-15 17:28 - 2013-10-15 17:28 - 01032220 _____ (Thisisu) C:\Users\Tanii\Desktop\JRT.exe
2013-10-15 17:26 - 2013-10-15 17:26 - 00008372 _____ C:\Users\Tanii\Desktop\AdwCleaner[S0].txt
2013-10-15 17:20 - 2012-07-26 07:26 - 00524288 ___SH C:\Windows\system32\config\BBI
2013-10-15 17:20 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-10-15 17:19 - 2013-10-15 17:16 - 00000000 ____D C:\AdwCleaner
2013-10-15 17:18 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-15 17:13 - 2013-10-15 17:13 - 01048960 _____ C:\Users\Tanii\Desktop\adwcleaner.exe
2013-10-15 16:54 - 2013-08-20 20:44 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 16:54 - 2013-08-20 20:44 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 16:33 - 2013-08-26 22:58 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE26D711-8C71-48AB-AB84-59DF11B0F137}
2013-10-15 09:12 - 2013-10-15 09:12 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 09:03 - 2013-10-15 09:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tanii\Desktop\mbam-setup-1.75.0.1300.exe
2013-10-15 09:03 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-10-15 09:03 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-10-15 08:57 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-15 02:50 - 2013-10-15 02:50 - 00033664 _____ C:\Users\Tanii\Desktop\Logfiles.zip
2013-10-15 02:47 - 2013-10-15 02:47 - 01110476 _____ C:\Users\Tanii\Downloads\7z920.exe
2013-10-15 02:47 - 2013-10-15 02:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-15 01:47 - 2013-10-15 01:47 - 00686159 _____ C:\Users\Tanii\Desktop\Gmer.txt
2013-10-15 01:42 - 2013-10-15 01:42 - 00282008 _____ C:\Windows\Minidump\101513-4875-01.dmp
2013-10-15 01:42 - 2013-08-27 20:29 - 832416466 _____ C:\Windows\MEMORY.DMP
2013-10-15 01:42 - 2013-08-27 20:29 - 00000000 ____D C:\Windows\Minidump
2013-10-15 01:20 - 2013-10-15 01:20 - 00377856 _____ C:\Users\Tanii\Desktop\cn3mh19y.exe
2013-10-15 01:18 - 2013-10-15 01:16 - 00030452 _____ C:\Users\Tanii\Desktop\Addition.txt
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:10 - 2013-10-15 01:07 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:07 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-14 22:55 - 2013-08-20 17:10 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-229403605-4087374091-3052702-1001
2013-10-14 22:01 - 2013-08-15 03:08 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 21:58 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Studium
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:29 - 2013-10-14 12:26 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:29 - 2013-09-13 19:15 - 00000000 ____D C:\Program Files\Google
2013-10-14 12:29 - 2013-08-20 20:44 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:08 - 2013-10-14 12:07 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-10-14 00:30 - 2013-09-20 23:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-10-14 00:14 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-14 00:13 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2013-10-14 00:12 - 2013-10-13 22:14 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 19:57 - 2013-08-22 22:31 - 00000000 ____D C:\Users\Tanii\AppData\Local\CrashDumps
2013-10-13 15:58 - 2013-08-21 23:18 - 00000979 _____ C:\Users\Tanii\Desktop\Dropbox.lnk
2013-10-13 15:58 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-11 00:53 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii\AppData\Local\Packages
2013-10-11 00:28 - 2013-10-11 00:27 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 22:02 - 2013-08-21 22:49 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 22:00 - 2013-08-21 22:49 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 04:56 - 2013-08-20 20:46 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-10 04:35 - 2013-08-26 23:39 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-10-05 00:18 - 2013-08-20 20:44 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-03 22:17 - 2012-07-26 09:21 - 00030518 _____ C:\Windows\setupact.log
2013-10-02 03:38 - 2012-07-26 10:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2012-07-26 10:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 21:48 - 2013-09-26 19:24 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-27 00:17 - 2013-08-26 22:08 - 00000000 ____D C:\Users\Tanii\Downloads\Programme
2013-09-26 23:59 - 2013-09-14 23:21 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 19:01 - 2013-08-20 20:44 - 00000000 ____D C:\Users\Tanii\AppData\Local\Google
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:32 - 2013-09-25 23:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-25 23:12 - 2013-09-25 23:04 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:21 - 2013-09-24 23:19 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte Tanja Schmitt.xlsx
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 21:07 - 2013-09-24 21:01 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-23 01:28 - 2013-10-10 08:05 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-10 08:05 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-10 08:06 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-21 13:59 - 2013-09-15 21:32 - 00000000 ____D C:\Users\Tanii\Downloads\SONY Updates
2013-09-21 13:54 - 2013-08-15 03:49 - 00000000 ____D C:\Program Files\Sony
2013-09-21 13:33 - 2013-08-15 03:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 21:57 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-09-20 21:14 - 2013-09-19 21:50 - 00000000 ____D C:\Program Files\office.tmp
2013-09-20 20:31 - 2013-08-15 03:35 - 00000000 ____D C:\Program Files\McAfeeEx
2013-09-20 20:31 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\mcafee
2013-09-19 22:41 - 2013-09-14 23:20 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Google
2013-09-19 21:54 - 2013-08-15 03:20 - 00000000 ____D C:\ProgramData\McAfee
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:51 - 2012-07-26 10:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:17 - 2013-09-19 00:15 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
2013-09-15 22:55 - 2013-09-15 22:55 - 00307228 _____ C:\Users\Tanii\Documents\Auftragsbestätigung_Office_2013.oxps
2013-09-15 22:45 - 2013-08-20 20:20 - 00000000 ____D C:\Update
2013-09-15 21:46 - 2013-08-15 03:23 - 00001124 _____ C:\Windows\DirectX.log
2013-09-15 21:39 - 2013-08-15 03:20 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-09-15 21:14 - 2013-08-20 17:12 - 00000000 ____D C:\Users\Tanii\Documents\Sony PMB
2013-09-15 20:34 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Bewerbung
Some content of TEMP:
====================
C:\Users\Tanii\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Tanii\AppData\Local\Temp\Quarantine.exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (1).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (2).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-de.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 22:00
==================== End Of Log ============================
--- --- --- Danke schonmal! Taniix3 |
|
16.10.2013, 10:42
| #4 |
| /// the machine /// TB-Ausbilder | Windows 8: Entfernen von Monster-MarketplaceESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.10.2013, 17:08
| #5 |
| | Windows 8: Entfernen von Monster-Marketplace ESET LOG: Hier gab es während des Scanvorgangs 2 Funde. Dazu möchte ich aber bemerken, dass eine Festplatte gescannt wurde, auf der eine Systembackup eines anderen älteren PCs enthalten ist. Falls dieser evtl. einen "Schaden" hat soll der erstmal außer Acht gelassen werden... Die gefundenen Funde habe ich, wie in der Beschreibung steht, nicht löschen lassen. Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=29e722693137a641bd6dff1bd107ef63
# engine=15506
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-17 08:49:16
# local_time=2013-10-17 10:49:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=774 16777213 85 91 2911691 158709628 0 0
# compatibility_mode=5122 16777214 66 62 179120 9247642 0 0
# compatibility_mode=5893 16776574 100 94 4880645 12734314 0 0
# scanned=325734
# found=2
# cleaned=0
# scan_time=69842
sh=283E383E7719AA6E4A56E4BF5C520905B067CFAD ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="D:\TANIIS-PC\Backup Set 2009-06-22 161425\Backup Files 2012-05-16 120712\Backup files 2.zip"
sh=283E383E7719AA6E4A56E4BF5C520905B067CFAD ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="D:\TANIIS-PC2\Backup Set 2009-06-22 161425\Backup Files 2012-05-16 120712\Backup files 2.zip"
Code:
ATTFilter Results of screen317's Security Check version 0.99.74 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` McAfee Anti-Virus und Anti-Spyware avast! Antivirus Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 40 Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Firefox 23.0.1 Firefox out of Date! Google Chrome 29.0.1547.76 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` frisches FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Tanii (administrator) on VAIOPRO on 17-10-2013 17:55:18
Running from C:\Users\Tanii\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SmartConnectWork.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(McAfee, Inc.) c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCWebServer.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(McAfee, Inc.) C:\Program Files\mcafee\Endpoint Encryption for Files and Folders\MfeFfCore.exe
(Dropbox, Inc.) C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(McAfee, Inc.) c:\PROGRA~1\mcafee\msc\mcupdmgr.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Tanii\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16683_none_62280e15510f8e79\TiWorker.exe
(Microsoft Corporation) C:\Windows\system32\wwahost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-05-07] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3039984 2013-03-18] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [EPSON Stylus DX3800] - C:\Windows\TEMP\E_SCF07.tmp [59 2013-09-14] ()
HKLM\...\Run: [MfeFfCore] - C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCore.exe [399176 2012-02-13] (McAfee, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-08-06] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-04-23] (McAfee, Inc.)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)
HKLM-x32\...\Run: [MetroTileShortcut] - "C:\Program Files\McAfeeAntiTheft\2.2.279.5\McATUIHost.exe" /IMAT_SHORTCUTS
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
AppInit_DLLs: C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\ImatSup.dll [61688 2013-06-21] ()
Startup: C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tanii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - DefaultScope {3B9B5FC4-43F2-46FA-95A2-9B7A5F42730A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
SearchScopes: HKCU - {3B9B5FC4-43F2-46FA-95A2-9B7A5F42730A} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
SearchScopes: HKCU - {52954890-5926-4658-BB90-88FB9832B75A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files (x86)\Web Check\WebCheck.dll (Web Check)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.20 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: FoxyDeal - C:\Users\Tanii\AppData\Roaming\Mozilla\Firefox\Profiles\tg1rjaxj.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF Extension: No Name - C:\Program Files (x86)\Web Check\WebCheck.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Web Check) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacechnliklhcacondhhkkfobapdopee\0.1_0
CHR Extension: () - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Chrome In-App Payments service) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Plus-HD-3.8) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.23.19_0
CHR Extension: (Gmail) - C:\Users\Tanii\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files (x86)\Web Check\WebCheck.crx
==================== Services (Whitelisted) =================
S2 0245311381929629mcinstcleanup; C:\Windows\TEMP\024531~1.EXE [834664 2013-07-30] (McAfee, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [331776 2012-07-26] (Microsoft Corporation)
S2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-02] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182248 2013-03-14] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-02] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-08-06] (McAfee, Inc.)
S2 McATScheduler; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [334760 2012-12-21] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-02-28] (McAfee, Inc.)
R2 MfeFfCoreService; C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe [205128 2012-02-13] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-02] ()
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-04] (Sony Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-09-06] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-14] (soft Xpansion)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-02] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [104960 2012-07-07] (ASIX Electronics Corp.)
R3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [30720 2013-05-23] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-03-14] ()
R1 ImatDisk; C:\Windows\system32\DRIVERS\ImatDisk.sys [16360 2013-06-21] (McAfee, Inc.)
R1 ImatDmk; C:\Windows\System32\DRIVERS\ImatDmk.sys [505576 2013-06-21] (McAfee, Inc.)
R1 ImatDs; C:\Windows\System32\DRIVERS\ImatDs.sys [206424 2013-06-21] (McAfee, Inc.)
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-03-14] ()
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [97368 2013-04-03] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-03-14] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-04-02] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
R1 MfeEEFF; C:\Windows\System32\DRIVERS\MfeEEFF.sys [307888 2013-06-21] (McAfee, Inc.)
R1 MfeEEFFV; C:\Windows\System32\DRIVERS\MfeEEFFV.sys [67880 2013-06-21] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [337120 2013-02-18] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95856 2013-02-18] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3646432 2013-08-01] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-18] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2013-10-15] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-17 17:35 - 2013-10-17 17:35 - 00891167 _____ C:\Users\Tanii\Desktop\SecurityCheck.exe
2013-10-16 15:18 - 2013-10-16 15:18 - 02347384 _____ (ESET) C:\Users\Tanii\Desktop\esetsmartinstaller_enu.exe
2013-10-15 22:23 - 2013-10-15 22:23 - 00057319 _____ C:\Users\Tanii\Desktop\FRST2.txt
2013-10-15 21:25 - 2013-10-15 21:25 - 00001935 _____ C:\Users\Tanii\Desktop\JRT2.txt
2013-10-15 21:23 - 2013-10-15 21:23 - 00001935 _____ C:\Users\Tanii\Desktop\JRT.txt
2013-10-15 17:32 - 2013-10-15 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 17:28 - 2013-10-15 17:28 - 01032220 _____ (Thisisu) C:\Users\Tanii\Desktop\JRT.exe
2013-10-15 17:26 - 2013-10-15 17:26 - 00008372 _____ C:\Users\Tanii\Desktop\AdwCleaner[S0].txt
2013-10-15 17:16 - 2013-10-15 17:19 - 00000000 ____D C:\AdwCleaner
2013-10-15 17:13 - 2013-10-15 17:13 - 01048960 _____ C:\Users\Tanii\Desktop\adwcleaner.exe
2013-10-15 09:12 - 2013-10-15 09:12 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 09:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-15 09:03 - 2013-10-15 09:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tanii\Desktop\mbam-setup-1.75.0.1300.exe
2013-10-15 02:50 - 2013-10-15 02:50 - 00033664 _____ C:\Users\Tanii\Desktop\Logfiles.zip
2013-10-15 02:47 - 2013-10-15 02:47 - 01110476 _____ C:\Users\Tanii\Downloads\7zip.exe
2013-10-15 02:47 - 2013-10-15 02:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-15 01:47 - 2013-10-15 01:47 - 00686159 _____ C:\Users\Tanii\Desktop\Gmer.txt
2013-10-15 01:42 - 2013-10-15 01:42 - 00282008 _____ C:\Windows\Minidump\101513-4875-01.dmp
2013-10-15 01:20 - 2013-10-15 01:20 - 00377856 _____ C:\Users\Tanii\Desktop\cn3mh19y.exe
2013-10-15 01:16 - 2013-10-15 01:18 - 00030452 _____ C:\Users\Tanii\Desktop\Addition.txt
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:07 - 2013-10-15 01:10 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:28 - 2013-06-09 21:59 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-10-14 12:26 - 2013-10-14 12:29 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:07 - 2013-10-14 12:08 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-13 22:14 - 2013-10-14 00:12 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 21:29 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-10-13 21:29 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-10-13 21:29 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-10-13 21:29 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-10-13 21:28 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-10-13 21:28 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-13 21:28 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-13 21:28 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-10-13 21:28 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-13 21:28 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-10-13 21:28 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-10-13 21:27 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-10-13 21:27 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-10-13 21:27 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-13 21:27 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-13 21:27 - 2013-07-31 01:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-10-13 21:27 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-10-13 21:27 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-10-11 00:27 - 2013-10-11 00:28 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 08:08 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 08:08 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 08:07 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 08:07 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 08:07 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-10 08:06 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 08:06 - 2013-07-02 00:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 08:06 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-10 08:06 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 08:06 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 08:06 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 08:05 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 08:05 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 08:05 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 08:05 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 08:05 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 08:05 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-10 08:05 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-10-10 08:05 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 08:05 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 08:05 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-10-10 08:05 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 08:05 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 08:04 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 08:04 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 08:04 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-10 08:04 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-10 08:04 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-10 08:04 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-10 08:04 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-10 08:04 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-10 08:04 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 08:04 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 08:04 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 08:04 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-26 19:24 - 2013-10-01 21:48 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:33 - 2013-09-25 23:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:33 - 2013-09-25 23:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:04 - 2013-09-25 23:12 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 23:19 - 2013-09-25 00:21 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte Tanja Schmitt.xlsx
2013-09-24 21:01 - 2013-09-24 21:07 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-21 10:33 - 2013-10-15 22:11 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 23:03 - 2013-10-14 00:30 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-09-19 21:50 - 2013-09-20 21:14 - 00000000 ____D C:\Program Files\office.tmp
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:55 - 2012-05-28 10:28 - 00197264 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00505576 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDmk.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00307888 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFF.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00206424 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDs.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00067880 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\MfeEEFFV.sys
2013-09-19 00:27 - 2013-06-21 03:09 - 00016360 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\ImatDisk.sys
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-09-19 00:25 - 2013-10-14 12:03 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-09-19 00:20 - 2013-10-14 12:03 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:15 - 2013-09-19 00:17 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
==================== One Month Modified Files and Folders =======
2013-10-17 17:45 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Dropbox
2013-10-17 17:35 - 2013-10-17 17:35 - 00891167 _____ C:\Users\Tanii\Desktop\SecurityCheck.exe
2013-10-17 17:35 - 2013-08-26 23:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-17 17:33 - 2013-08-26 22:58 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE26D711-8C71-48AB-AB84-59DF11B0F137}
2013-10-17 17:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-17 16:59 - 2013-08-20 20:44 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-17 16:59 - 2013-08-20 20:44 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-17 13:03 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-17 11:14 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-10-16 18:47 - 2013-08-15 02:50 - 01703720 _____ C:\Windows\WindowsUpdate.log
2013-10-16 15:20 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-10-16 15:20 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-10-16 15:19 - 2013-08-15 03:48 - 00753134 _____ C:\Windows\system32\perfh007.dat
2013-10-16 15:19 - 2013-08-15 03:48 - 00155826 _____ C:\Windows\system32\perfc007.dat
2013-10-16 15:19 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-16 15:18 - 2013-10-16 15:18 - 02347384 _____ (ESET) C:\Users\Tanii\Desktop\esetsmartinstaller_enu.exe
2013-10-16 15:12 - 2013-08-21 23:18 - 00000000 ___RD C:\Users\Tanii\Dropbox
2013-10-16 00:16 - 2013-08-22 17:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-16 00:16 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-15 23:48 - 2013-09-15 20:34 - 00000000 ____D C:\Users\Tanii\Documents\Studium
2013-10-15 22:23 - 2013-10-15 22:23 - 00057319 _____ C:\Users\Tanii\Desktop\FRST2.txt
2013-10-15 22:14 - 2013-08-15 03:35 - 00002173 _____ C:\Users\Public\Desktop\Intel Anti-Theft Service.lnk
2013-10-15 22:11 - 2013-09-21 10:33 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2013-10-15 22:11 - 2013-08-15 04:26 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2013-10-15 22:11 - 2012-08-03 04:22 - 00237990 _____ C:\Windows\PFRO.log
2013-10-15 22:11 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-15 21:25 - 2013-10-15 21:25 - 00001935 _____ C:\Users\Tanii\Desktop\JRT2.txt
2013-10-15 21:23 - 2013-10-15 21:23 - 00001935 _____ C:\Users\Tanii\Desktop\JRT.txt
2013-10-15 19:35 - 2013-08-20 21:20 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Intel WiDi
2013-10-15 17:32 - 2013-10-15 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-10-15 17:28 - 2013-10-15 17:28 - 01032220 _____ (Thisisu) C:\Users\Tanii\Desktop\JRT.exe
2013-10-15 17:26 - 2013-10-15 17:26 - 00008372 _____ C:\Users\Tanii\Desktop\AdwCleaner[S0].txt
2013-10-15 17:20 - 2012-07-26 07:26 - 00524288 ___SH C:\Windows\system32\config\BBI
2013-10-15 17:20 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-10-15 17:19 - 2013-10-15 17:16 - 00000000 ____D C:\AdwCleaner
2013-10-15 17:18 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-15 17:13 - 2013-10-15 17:13 - 01048960 _____ C:\Users\Tanii\Desktop\adwcleaner.exe
2013-10-15 16:54 - 2013-08-20 20:44 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-15 16:54 - 2013-08-20 20:44 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-15 09:12 - 2013-10-15 09:12 - 00001105 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-15 09:12 - 2013-10-15 09:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-15 09:03 - 2013-10-15 09:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tanii\Desktop\mbam-setup-1.75.0.1300.exe
2013-10-15 02:50 - 2013-10-15 02:50 - 00033664 _____ C:\Users\Tanii\Desktop\Logfiles.zip
2013-10-15 02:47 - 2013-10-15 02:47 - 01110476 _____ C:\Users\Tanii\Downloads\7zip.exe
2013-10-15 02:47 - 2013-10-15 02:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-15 01:47 - 2013-10-15 01:47 - 00686159 _____ C:\Users\Tanii\Desktop\Gmer.txt
2013-10-15 01:42 - 2013-10-15 01:42 - 00282008 _____ C:\Windows\Minidump\101513-4875-01.dmp
2013-10-15 01:42 - 2013-08-27 20:29 - 832416466 _____ C:\Windows\MEMORY.DMP
2013-10-15 01:42 - 2013-08-27 20:29 - 00000000 ____D C:\Windows\Minidump
2013-10-15 01:20 - 2013-10-15 01:20 - 00377856 _____ C:\Users\Tanii\Desktop\cn3mh19y.exe
2013-10-15 01:18 - 2013-10-15 01:16 - 00030452 _____ C:\Users\Tanii\Desktop\Addition.txt
2013-10-15 01:13 - 2013-10-15 01:13 - 00000000 ____D C:\FRST
2013-10-15 01:12 - 2013-10-15 01:12 - 01954124 _____ (Farbar) C:\Users\Tanii\Desktop\FRST64.exe
2013-10-15 01:10 - 2013-10-15 01:07 - 00000472 _____ C:\Users\Tanii\Desktop\defogger_disable.log
2013-10-15 01:07 - 2013-10-15 01:07 - 00000000 _____ C:\Users\Tanii\defogger_reenable
2013-10-15 01:07 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii
2013-10-15 01:03 - 2013-10-15 01:03 - 00050477 _____ C:\Users\Tanii\Desktop\Defogger.exe
2013-10-14 22:55 - 2013-08-20 17:10 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-229403605-4087374091-3052702-1001
2013-10-14 22:01 - 2013-08-15 03:08 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-14 16:26 - 2013-10-14 16:26 - 00284320 _____ C:\Windows\Minidump\101413-5296-01.dmp
2013-10-14 12:29 - 2013-10-14 12:29 - 00000000 ____D C:\ProgramData\Google
2013-10-14 12:29 - 2013-10-14 12:26 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Foxit Software
2013-10-14 12:29 - 2013-09-13 19:15 - 00000000 ____D C:\Program Files\Google
2013-10-14 12:29 - 2013-08-20 20:44 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-14 12:28 - 2013-10-14 12:28 - 00002046 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-14 12:26 - 2013-10-14 12:26 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-10-14 12:24 - 2013-10-14 12:24 - 29966088 _____ (Foxit Corporation ) C:\Users\Tanii\Downloads\FoxitReader606.0722_enu_Setup.exe
2013-10-14 12:13 - 2013-10-14 12:13 - 00000000 ____D C:\Users\Tanii\AppData\Local\PDF24
2013-10-14 12:08 - 2013-10-14 12:08 - 00001070 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk
2013-10-14 12:08 - 2013-10-14 12:08 - 00001055 _____ C:\Users\Public\Desktop\PDF24 Fax.lnk
2013-10-14 12:08 - 2013-10-14 12:07 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-10-14 12:06 - 2013-10-14 12:06 - 15911976 _____ (Geek Software GmbH ) C:\Users\Tanii\Downloads\pdf24-creator-5.7.0.exe
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:25 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IMAT
2013-10-14 12:03 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\McAfeeAntiTheft
2013-10-14 00:30 - 2013-09-20 23:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-10-14 00:14 - 2013-08-20 15:46 - 00000000 ___RD C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-14 00:13 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2013-10-14 00:12 - 2013-10-13 22:14 - 00000561 _____ C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Startseite - Fachschaft Logistik & Wirtschaftingenieurwesen.website
2013-10-13 19:57 - 2013-08-22 22:31 - 00000000 ____D C:\Users\Tanii\AppData\Local\CrashDumps
2013-10-13 15:58 - 2013-08-21 23:18 - 00000979 _____ C:\Users\Tanii\Desktop\Dropbox.lnk
2013-10-13 15:58 - 2013-08-21 23:17 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-11 00:53 - 2013-08-20 15:45 - 00000000 ____D C:\Users\Tanii\AppData\Local\Packages
2013-10-11 00:28 - 2013-10-11 00:27 - 00449184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 22:02 - 2013-08-21 22:49 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 22:00 - 2013-08-21 22:49 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 20:31 - 2013-10-10 20:31 - 00399519 _____ C:\Users\Tanii\Documents\Bestaetigung_DAK
2013-10-10 04:56 - 2013-08-20 20:46 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-10 04:35 - 2013-08-26 23:39 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 12:18 - 2013-10-08 12:18 - 00000820 _____ C:\Users\Tanii\Downloads\073001_Werkstofftechnik_I.ics
2013-10-08 12:16 - 2013-10-08 12:16 - 00000817 _____ C:\Users\Tanii\Downloads\072500_Fertigungslehre.ics
2013-10-08 12:15 - 2013-10-08 12:15 - 00000817 _____ C:\Users\Tanii\Downloads\072000_Fertigungslehre.ics
2013-10-05 00:18 - 2013-08-20 20:44 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-03 22:17 - 2012-07-26 09:21 - 00030518 _____ C:\Windows\setupact.log
2013-10-02 03:38 - 2012-07-26 10:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2012-07-26 10:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 21:48 - 2013-09-26 19:24 - 00000000 ____D C:\Users\Tanii\Documents\ZF
2013-09-27 00:18 - 2013-09-27 00:18 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\WildTangent
2013-09-27 00:17 - 2013-08-26 22:08 - 00000000 ____D C:\Users\Tanii\Downloads\Programme
2013-09-26 23:59 - 2013-09-14 23:21 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 19:01 - 2013-08-20 20:44 - 00000000 ____D C:\Users\Tanii\AppData\Local\Google
2013-09-25 23:33 - 2013-09-25 23:33 - 00000000 ____D C:\ProgramData\Oracle
2013-09-25 23:32 - 2013-09-25 23:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-25 23:32 - 2013-09-25 23:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-25 23:32 - 2013-08-15 03:19 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-25 23:12 - 2013-09-25 23:04 - 29036456 _____ (Oracle Corporation) C:\Users\Tanii\Downloads\jre-7u40-windows-i586.exe
2013-09-25 00:21 - 2013-09-24 23:19 - 00011698 _____ C:\Users\Tanii\Downloads\Ausbildungsinhalte Tanja Schmitt.xlsx
2013-09-25 00:18 - 2013-09-25 00:18 - 00000000 ____D C:\Users\Tanii\Documents\Benutzerdefinierte Office-Vorlagen
2013-09-24 21:07 - 2013-09-24 21:01 - 00000000 ____D C:\Users\Tanii\Documents\Kreditkartenabrechnung
2013-09-23 01:28 - 2013-10-10 08:05 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-10 08:05 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-10 08:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-10 08:05 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-10 08:06 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-10 08:05 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-21 13:59 - 2013-09-15 21:32 - 00000000 ____D C:\Users\Tanii\Downloads\SONY Updates
2013-09-21 13:54 - 2013-08-15 03:49 - 00000000 ____D C:\Program Files\Sony
2013-09-21 13:33 - 2013-08-15 03:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-20 23:12 - 2013-09-20 23:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-20 21:14 - 2013-09-19 21:50 - 00000000 ____D C:\Program Files\office.tmp
2013-09-20 20:31 - 2013-08-15 03:35 - 00000000 ____D C:\Program Files\McAfeeEx
2013-09-20 20:31 - 2013-08-15 03:20 - 00000000 ____D C:\Program Files\mcafee
2013-09-19 22:41 - 2013-09-14 23:20 - 00000000 ____D C:\Users\Tanii\AppData\Roaming\Google
2013-09-19 21:54 - 2013-08-15 03:20 - 00000000 ____D C:\ProgramData\McAfee
2013-09-19 21:38 - 2013-09-19 21:38 - 00282664 _____ C:\Windows\Minidump\091913-5343-02.dmp
2013-09-19 20:51 - 2012-07-26 10:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-09-19 00:20 - 2013-09-19 00:20 - 00000000 ____D C:\Program Files\Common Files\McAfeeAntiTheft
2013-09-19 00:17 - 2013-09-19 00:15 - 00000000 ____D C:\Program Files\stinger
2013-09-19 00:15 - 2013-09-19 00:15 - 00000000 ____D C:\Stinger_Quarantine
2013-09-19 00:02 - 2013-09-19 00:02 - 00284208 _____ C:\Windows\Minidump\091913-5343-01.dmp
2013-09-18 23:30 - 2013-09-18 23:30 - 00284208 _____ C:\Windows\Minidump\091813-5328-01.dmp
Some content of TEMP:
====================
C:\Users\Tanii\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Tanii\AppData\Local\Temp\Quarantine.exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (1).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_ (2).exe
C:\Users\Tanii\AppData\Local\Temp\Setup.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-de.exe
C:\Users\Tanii\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_KTV6N-X7XVT-Q4FXK-RV8J9-7XJQD_act_1_.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 22:00
==================== End Of Log ============================
[/CODE] |
|
18.10.2013, 10:38
| #6 |
| /// the machine /// TB-Ausbilder | Windows 8: Entfernen von Monster-Marketplace Das Backup der beiden PC würd ich löschen. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Windows 8: Entfernen von Monster-Marketplace |
|
21.10.2013, 19:40
| #7 |
| | Windows 8: Entfernen von Monster-Marketplace Hallo Schrauber, vielen vielen Dank für die Hilfe! Ich war schon echt verzweifelt, aber jetzt laufen auch die Sachen in den anderen Browsern wieder rund.. Ich bin nun wieder auf Mozilla zurückumgestiegen.. Die "unerwünschten" Programme konnte ich entfernen und einige der Schutzprogramme habe ich nun auch installiert. Weitere von den Empfohlenen folgen, sobald ich mehr Zeit habe mich damit auseinanderzusetzen.. Virenschutz habe ich nun auch nur noch einen. Kannst du Avast! empfehlen, oder würdest du eher andere Programme vorziehen? Liebe Grüße und viel Erfolg bei deinem Studium - ich hab jetzt auch angefangen Taniix3 |
|
22.10.2013, 13:30
| #8 |
| /// the machine /// TB-Ausbilder | Windows 8: Entfernen von Monster-Marketplace Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 8: Entfernen von Monster-Marketplace |
| antivir, antivirus, browser, cpu, desktop, device driver, diagnostics, entfernen, farbar, farbar recovery scan tool, flash player, freemium, installation, internet, internet explorer, karte, loswerden, mcafee firewall, minidump, monstermarketplace, mozilla, performance, plug-in, plugin, pup.optional.crossrider, pup.optional.crossrider.a, pup.optional.plushd.a, software, svchost.exe, system, version., wildtangent games, windows, windowsapps, xperia |
Linear-Darstellung
