| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
15.10.2013, 20:14
| #1 |
| |  Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? Hallo, kenn mich nicht mit PCs aus und wäre für jede Hilfe dankbar! Wie check ich am Besten das komplette System? |
|
15.10.2013, 20:23
| #2 | |
| /// TB-Ausbilder   | Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? Hallo,
__________________Zitat:
Wenn du deinen Rechner nach Malware untersuchen lassen willst, dann arbeite bitte diese Anleitung ab und poste die resultierenden Logfiles hier.
__________________ |
|
16.10.2013, 06:52
| #3 |
| | Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen?Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 07:25 on 16/10/2013 (KDN)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by KDN (administrator) on AZZLAK on 16-10-2013 07:31:30
Running from C:\Users\KDN\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() c:\progra~2\optimi~1\OptProCrash.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(cake bake) C:\Program Files (x86)\Betcat\WBDesktop.Updater.1.0.0.16.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Bake Cake) C:\Users\KDN\AppData\Roaming\Betcat\WebCakeDesktop.exe
(Spotify Ltd) C:\Users\KDN\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Users\KDN\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(keepvid.com Company) C:\Users\KDN\AppData\Local\keepvid.com.exe
(DVDVideoSoft Ltd.) C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BeatsOSDApp] - C:\Program Files\IDT\WDM\beats64.exe [37888 2012-08-10] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-10] (IDT, Inc.)
HKCU\...\Run: [WebCake Desktop] - C:\Users\KDN\AppData\Roaming\Betcat\WebCakeDesktop.exe [52504 2013-08-10] (Bake Cake)
HKCU\...\Run: [Spotify] - C:\Users\KDN\AppData\Roaming\Spotify\Spotify.exe [4736000 2013-10-13] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\KDN\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-13] (Spotify Ltd)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Run: [ContentAgent] - C:\Users\KDN\AppData\Local\ContentAgent.exe [108032 2013-08-19] ()
HKCU\...\Run: [CashPartners] - C:\Users\KDN\AppData\Local\aHaskZ3\CashPartners.exe [259072 2013-09-17] (CashPartners Company)
HKCU\...\Run: [GoogleChromeAutoLaunch_056A529373C0B3BC046CC76761CAA6BA] - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\KDN\AppData\Local\Smartbar\Application\SnapDo.exe [20992 2013-07-28] (Smartbar)
HKCU\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135672 2013-09-29] (PC Utilities Pro)
HKCU\...\Run: [AppsHat] - C:\Users\KDN\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKCU\...\Run: [Apps Hat] - C:\Users\KDN\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
MountPoints2: {643f577a-ab93-11e2-be78-b4b52fcc00da} - "G:\LGAutoRun.exe"
MountPoints2: {78acad08-732a-11e2-be6c-b4b52fcc00da} - "H:\EasySuite.exe"
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [keepvid] - C:\Users\KDN\AppData\Local\keepvid.com.exe [1120256 2013-06-10] (keepvid.com Company)
AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL [2594608 2013-10-03] ()
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll [2859992 2013-09-30] ()
IMEO\hpconnectedremotemgmtui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IMEO\optimizerpro.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IMEO\steam.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IMEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IMEO\uninstall.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c0cbf4d8-4f49-ce8d-71c2-e5e2b22829ba&searchtype=ds&q={searchTerms}&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=64843&tid=6630&ver=4.7&ts=1378321261255&tguid=64843-6630-1378321261255-8F37964A37527E8EF37FE8619DE65A29&st=chrome&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c0cbf4d8-4f49-ce8d-71c2-e5e2b22829ba&searchtype=ds&q={searchTerms}&installDate={installDate}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=64843&tid=6630&ver=4.7&ts=1378321261255&tguid=64843-6630-1378321261255-8F37964A37527E8EF37FE8619DE65A29&st=chrome&q=
URLSearchHook: (No Name) - {539F76FD-084E-4858-86D5-62F02F54AE86} - No File
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM - {2ED11BB4-07E5-4B57-8672-38FABD82D6C3} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM-x32 - {0633ee93-d776-472f-a0ff-e1416b8b2e3a} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKLM-x32 - {2ED11BB4-07E5-4B57-8672-38FABD82D6C3} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c0cbf4d8-4f49-ce8d-71c2-e5e2b22829ba&searchtype=ds&q={searchTerms}&installDate={installDate}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c0cbf4d8-4f49-ce8d-71c2-e5e2b22829ba&searchtype=ds&q={searchTerms}&installDate={installDate}
SearchScopes: HKCU - {0633ee93-d776-472f-a0ff-e1416b8b2e3a} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
SearchScopes: HKCU - {2ED11BB4-07E5-4B57-8672-38FABD82D6C3} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\Betcat\WebCakeIEClient.dll (Bake-Cake)
BHO-x32: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: keepvid.com - {49ed9900-38cd-453c-bba7-3f2613317f5a} - C:\Users\KDN\AppData\Local\keepvid.dll (keepvid.com Company)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: SoundFrost - {d997c836-ff82-4519-b459-1482ba942a4f} - C:\Program Files (x86)\SoundFrost\SoundFrost.dll (SoundFrost Company)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default
FF user.js: detected! => C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WebCake - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\plugin@getwebcake.com
FF Extension: AppsHat - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\{97A78363-B868-4B48-AC91-A783A31215AF}
FF Extension: elemhidehelper - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: ftd - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\ftd@ftd.com.xpi
FF Extension: ptl - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\ptl@ptl.com.xpi
FF Extension: No Name - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\WTB_GLOBAL.sqlite
FF Extension: No Name - C:\Users\KDN\AppData\Roaming\Mozilla\Firefox\Profiles\e2phz81f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: QuickStores-Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\quickstores@quickstores.de
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\IPSFFPlgn\
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: No Name - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
Chrome:
=======
CHR HomePage: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=B683B4B52FCC00DA&affID=119357&tt=280813_ctrl1&tsp=4991
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=B683B4B52FCC00DA&affID=119357&tt=280813_ctrl1&tsp=4991", "hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c0cbf4d8-4f49-ce8d-71c2-e5e2b22829ba&searchtype=hp&installDate={installDate}"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Extension: (Google Docs) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Compress and Zip Images & Photos Online) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blinbhliohhhnddefmgbaelknpjpopjh\1.0_0
CHR Extension: (YouTube) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (3D Graffiti) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabfebkdmghefegjmochekfnmiikkko\1_0
CHR Extension: (Google Search) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SoundFrost) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\epmacgekaillabiljokcfdjifdeiejfi\3.6.2_0
CHR Extension: (PutLocker Downloader) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\faklkmlkcleeoibffcbligohmkciloif\4.0_0
CHR Extension: (WebCake) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh\1.0.3_1
CHR Extension: (AdBlock) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0
CHR Extension: (Wajam) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0
CHR Extension: (FT Downloader) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp\5.0_0
CHR Extension: (Download Youtube as mp3) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mepapnoaejebkkpkpacihjlfekoggahp\2.0_0
CHR Extension: (Norton Identity Protection) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_1
CHR Extension: (Minibar ) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo\2.0.1_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (keepvid.com) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipolchnclfaogmpaomopjibifaabgif\2.0.0.0_0
CHR Extension: (MyPrintScreen) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\phbdoklmoijgoildghakacmipacllokm\2.0.0.0_0
CHR Extension: (Gmail) - C:\Users\KDN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [faklkmlkcleeoibffcbligohmkciloif] - C:\Program Files (x86)\PutLockerDownloader\PutLockerDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\Betcat\WebCakeLayers.crx
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\KDN\AppData\Local\Wajam\Chrome\wajam.crx
CHR HKLM-x32\...\Chrome\Extension: [lgnbhdnimikkoodkogjlcllngimhlapp] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
==================== Services (Whitelisted) =================
R2 70e6ca8c; c:\progra~2\optimi~1\OptProCrash.exe [143488 2013-10-03] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
S4 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-08] (TuneUp Software)
S4 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2013-07-10] (Wajam)
R2 WebCake Desktop Updater; C:\Program Files (x86)\Betcat\WBDesktop.Updater.1.0.0.16.exe [51992 2013-08-15] (cake bake)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-31] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130322.001\BHDrvx64.sys [1387608 2013-03-22] (Symantec Corporation)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130322.001\BHDrvx64.sys [1387608 2013-03-22] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-02-10] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-02-10] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-02-12] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130411.001\IDSvia64.sys [513184 2013-03-20] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130411.001\IDSvia64.sys [513184 2013-03-20] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-31] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130411.032\ENG64.SYS [126192 2013-03-21] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130411.032\ENG64.SYS [126192 2013-03-21] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130411.032\EX64.SYS [2087664 2013-03-21] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130411.032\EX64.SYS [2087664 2013-03-21] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-16 07:31 - 2013-10-16 07:31 - 00000000 ____D C:\FRST
2013-10-16 07:30 - 2013-10-16 07:30 - 01954124 _____ (Farbar) C:\Users\KDN\Desktop\FRST64.exe
2013-10-16 07:22 - 2013-10-16 07:25 - 00000468 _____ C:\Users\KDN\Desktop\defogger_disable.log
2013-10-16 07:22 - 2013-10-16 07:22 - 00000000 _____ C:\Users\KDN\defogger_reenable
2013-10-16 07:20 - 2013-10-16 07:20 - 00050477 _____ C:\Users\KDN\Desktop\Defogger.exe
2013-10-15 06:08 - 2013-10-16 01:19 - 101288804 _____ C:\windows\SysWOW64\ﰵᎫLś
2013-10-15 06:06 - 2013-10-15 06:06 - 00295920 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-14 19:30 - 2013-10-14 19:30 - 00000000 ____D C:\Users\KDN\Desktop\Neuer Ordner
2013-10-13 21:33 - 2013-10-13 21:33 - 00000000 ____D C:\Users\KDN\Desktop\innung
2013-10-12 21:26 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-10-12 21:26 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-10-12 21:25 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2013-10-12 21:25 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncInfo.dll
2013-10-12 21:25 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2013-10-12 21:25 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll
2013-10-12 21:25 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\windows\system32\wvc.dll
2013-10-12 21:25 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\sysmon.ocx
2013-10-12 21:25 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\windows\SysWOW64\sysmon.ocx
2013-10-12 21:25 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdc.dll
2013-10-12 21:25 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\windows\SysWOW64\wvc.dll
2013-10-12 21:25 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2013-10-12 21:25 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-10-12 21:25 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-10-12 21:25 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2013-10-12 21:25 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-10-12 21:25 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-10-12 21:25 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-12 21:25 - 2013-07-31 01:30 - 00386923 _____ C:\windows\system32\ApnDatabase.xml
2013-10-12 21:25 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mbsmsapi.dll
2013-10-12 21:25 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\mbsmsapi.dll
2013-10-12 21:25 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2013-10-12 21:25 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2013-10-12 12:27 - 1997-12-17 18:33 - 00304128 _____ (InstallShield Software Corporation) C:\windows\IsUninst.exe
2013-10-12 10:35 - 2013-10-12 10:35 - 00000001 _____ C:\Users\KDN\Downloads\SI.bin
2013-10-12 10:11 - 2013-10-12 10:32 - 545109723 _____ (InstallShield Software Corporation) C:\Users\KDN\Downloads\RS_Lockdown_demo.exe
2013-10-09 07:16 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 07:16 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 07:16 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 07:16 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 07:16 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 07:16 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 07:16 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 07:16 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 07:16 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 07:16 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 07:16 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 07:16 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 07:16 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 07:16 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 07:16 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 07:16 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 07:16 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 07:16 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 07:16 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 07:16 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 07:16 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 07:16 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 07:16 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 07:16 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 07:16 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 07:16 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 07:16 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 07:15 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 07:15 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 07:15 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 07:15 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 07:15 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 07:15 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 07:14 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 07:14 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:14 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:14 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 07:14 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 07:14 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 07:14 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 07:14 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 07:14 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 07:14 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 07:14 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 07:14 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 07:14 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 07:14 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 07:14 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 07:14 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 07:14 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:14 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 07:14 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 07:14 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 07:14 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 07:14 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-07 20:31 - 2013-10-07 20:31 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-07 20:31 - 2013-10-07 20:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-07 20:10 - 2013-10-07 20:10 - 00001111 _____ C:\Users\KDN\Desktop\Continue Firefox Installation.lnk
2013-10-07 18:57 - 2013-10-07 18:57 - 00001440 _____ C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-03 20:48 - 2011-04-15 11:14 - 00000000 ____D C:\Users\KDN\Desktop\PedazUndPhillayoe_KnockoutEP
2013-10-03 17:45 - 2013-10-03 18:03 - 55458700 _____ C:\Users\KDN\Downloads\PP_KOEP-darkKO.rar
2013-10-03 11:22 - 2013-10-03 11:42 - 00002036 _____ C:\Users\KDN\Desktop\Continue installation - Music Codec Pack Installation.lnk
2013-10-03 01:15 - 2013-10-03 01:15 - 00936640 _____ C:\Users\KDN\Downloads\FLVPlayerSetup.exe
2013-10-03 00:53 - 2013-10-03 00:53 - 00002770 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-10-03 00:29 - 2013-10-03 00:29 - 00000000 ____D C:\Users\KDN\Documents\Optimizer Pro
2013-10-03 00:29 - 2013-10-03 00:29 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Optimizer Pro
2013-10-03 00:24 - 2013-10-03 00:24 - 00002098 _____ C:\Users\KDN\Desktop\AppsHat.lnk
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Local\WebPlayer
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Local\Minibar
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Program Files (x86)\Minibar
2013-10-03 00:23 - 2013-10-03 00:23 - 00001064 _____ C:\Users\KDN\Desktop\Optimizer Pro.lnk
2013-10-03 00:23 - 2013-10-03 00:23 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-10-03 00:22 - 2013-10-06 14:09 - 00002545 _____ C:\Users\KDN\Desktop\Search.lnk
2013-10-03 00:22 - 2013-10-06 14:08 - 00002592 _____ C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2013-10-03 00:22 - 2013-10-03 00:23 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-10-03 00:22 - 2013-10-03 00:22 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-10-03 00:22 - 2013-10-03 00:22 - 00000000 ____D C:\Users\KDN\AppData\Local\Wajam
2013-10-03 00:21 - 2013-10-03 00:22 - 00000000 ____D C:\Users\KDN\AppData\Local\Smartbar
2013-10-03 00:20 - 2013-10-03 12:25 - 07392449 _____ C:\Users\KDN\AppData\Local\helper.dat
2013-10-03 00:20 - 2013-10-03 12:25 - 00089088 _____ (keepvid.com Company) C:\Users\KDN\AppData\Local\keepvid.dll
2013-10-03 00:20 - 2013-10-03 12:25 - 00000306 __RSH C:\Users\KDN\ntuser.pol
2013-10-03 00:20 - 2013-10-03 00:24 - 00000000 ____D C:\Program Files (x86)\SoundFrost
2013-10-03 00:20 - 2013-10-03 00:20 - 00000000 ____D C:\Users\KDN\AppData\Local\aHaskZ3
2013-10-03 00:20 - 2013-08-19 12:42 - 00108032 _____ C:\Users\KDN\AppData\Local\ContentAgent.exe
2013-10-03 00:20 - 2013-08-07 16:32 - 02598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\KDN\AppData\Local\QtCore4.dll
2013-10-03 00:20 - 2013-06-27 11:16 - 08581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\KDN\AppData\Local\QtGui4.dll
2013-10-03 00:20 - 2013-06-27 11:10 - 01053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\KDN\AppData\Local\QtNetwork4.dll
2013-10-03 00:20 - 2013-06-10 17:59 - 01120256 _____ (keepvid.com Company) C:\Users\KDN\AppData\Local\keepvid.com.exe
2013-10-03 00:20 - 2013-03-18 18:45 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\KDN\AppData\Local\libeay32.dll
2013-10-03 00:20 - 2013-03-18 18:45 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\KDN\AppData\Local\ssleay32.dll
2013-10-03 00:20 - 2011-06-11 01:58 - 00773968 _____ (Microsoft Corporation) C:\Users\KDN\AppData\Local\msvcr100.dll
2013-10-03 00:20 - 2011-06-11 01:58 - 00421200 _____ (Microsoft Corporation) C:\Users\KDN\AppData\Local\msvcp100.dll
2013-10-03 00:18 - 2013-10-03 00:18 - 29078129 _____ (SoundFrost Company ) C:\Users\KDN\Downloads\soundfrost.exe
2013-10-02 23:42 - 2013-10-12 08:59 - 00001350 _____ C:\Users\KDN\Desktop\Streamripper.lnk
2013-10-02 22:08 - 2013-10-02 22:08 - 00000000 ____D C:\Users\KDN\AppData\Roaming\streamripper
2013-10-02 22:00 - 2013-10-02 22:00 - 00000000 ____D C:\Program Files (x86)\Streamripper
2013-10-02 21:30 - 2013-10-08 14:42 - 00043320 _____ (TuneUp Software) C:\windows\system32\uxtuneup.dll
2013-10-02 21:30 - 2013-10-08 14:42 - 00036152 _____ (TuneUp Software) C:\windows\SysWOW64\uxtuneup.dll
2013-10-02 21:30 - 2013-09-09 15:29 - 00043320 _____ (TuneUp Software) C:\windows\system32\uxtC75D.tmp
2013-10-02 21:27 - 2013-10-08 14:42 - 00040760 _____ (TuneUp Software) C:\windows\system32\TURegOpt.exe
2013-10-02 21:27 - 2013-10-08 14:42 - 00029496 _____ (TuneUp Software) C:\windows\system32\authuitu.dll
2013-10-02 21:27 - 2013-10-08 14:42 - 00025400 _____ (TuneUp Software) C:\windows\SysWOW64\authuitu.dll
2013-10-02 21:26 - 2013-10-02 21:26 - 02633439 _____ C:\Users\KDN\Downloads\streamripper-windows-installer-1.64.6.exe
2013-10-02 21:26 - 2013-10-02 21:26 - 00002211 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-10-02 21:26 - 2013-10-02 21:26 - 00002191 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-10-02 21:26 - 2013-10-02 21:26 - 00000000 ____D C:\Users\KDN\AppData\Roaming\TuneUp Software
2013-10-02 21:25 - 2013-10-15 21:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-10-02 21:25 - 2013-10-02 21:37 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-02 21:25 - 2013-10-02 21:31 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-02 21:24 - 2013-10-02 23:09 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Winamp
2013-10-02 21:24 - 2013-10-02 21:26 - 00000000 ____D C:\Program Files (x86)\Winamp
2013-10-02 21:24 - 2013-10-02 21:24 - 00000981 _____ C:\Users\Public\Desktop\Winamp.lnk
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\OpenCandy
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Program Files (x86)\Winamp Detect
2013-10-02 21:23 - 2013-10-02 21:23 - 17664368 _____ (Nullsoft, Inc.) C:\Users\KDN\Downloads\winamp565_full_emusic-7plus_all.exe
2013-09-30 20:13 - 2013-10-01 05:57 - 98602865 _____ C:\windows\SysWOW64\ᣒㅋLİ
2013-09-23 17:56 - 2013-10-15 23:58 - 00003148 _____ C:\windows\System32\Tasks\HPCeeScheduleForKDN
2013-09-23 17:56 - 2013-10-15 23:58 - 00000338 _____ C:\windows\Tasks\HPCeeScheduleForKDN.job
2013-09-22 23:22 - 2013-09-22 23:22 - 00000221 _____ C:\Users\KDN\Desktop\Sniper Ghost Warrior 2 Demo.url
2013-09-20 12:31 - 2013-09-29 20:13 - 98466785 _____ C:\windows\SysWOW64\농�LĎ
2013-09-16 21:18 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll
==================== One Month Modified Files and Folders =======
2013-10-16 07:31 - 2013-10-16 07:31 - 00000000 ____D C:\FRST
2013-10-16 07:30 - 2013-10-16 07:30 - 01954124 _____ (Farbar) C:\Users\KDN\Desktop\FRST64.exe
2013-10-16 07:30 - 2013-02-11 16:08 - 05600256 ___SH C:\Users\KDN\Downloads\Thumbs.db
2013-10-16 07:25 - 2013-10-16 07:22 - 00000468 _____ C:\Users\KDN\Desktop\defogger_disable.log
2013-10-16 07:22 - 2013-10-16 07:22 - 00000000 _____ C:\Users\KDN\defogger_reenable
2013-10-16 07:22 - 2013-02-10 08:45 - 00000000 ____D C:\Users\KDN
2013-10-16 07:20 - 2013-10-16 07:20 - 00050477 _____ C:\Users\KDN\Desktop\Defogger.exe
2013-10-16 06:43 - 2013-02-10 17:07 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-16 06:41 - 2013-06-02 17:26 - 00001118 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-16 06:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-10-16 05:39 - 2013-08-10 13:01 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Betcat
2013-10-16 01:19 - 2013-10-15 06:08 - 101288804 _____ C:\windows\SysWOW64\ﰵᎫLś
2013-10-15 23:58 - 2013-09-23 17:56 - 00003148 _____ C:\windows\System32\Tasks\HPCeeScheduleForKDN
2013-10-15 23:58 - 2013-09-23 17:56 - 00000338 _____ C:\windows\Tasks\HPCeeScheduleForKDN.job
2013-10-15 22:32 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2013-10-15 21:14 - 2013-02-10 08:45 - 01283939 _____ C:\windows\WindowsUpdate.log
2013-10-15 21:03 - 2013-10-02 21:25 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-10-15 19:23 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-15 19:19 - 2013-07-11 21:01 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Spotify
2013-10-15 19:18 - 2013-06-02 17:26 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-15 06:13 - 2013-02-10 08:48 - 00000000 ___RD C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-15 06:13 - 2013-02-10 08:48 - 00000000 ___RD C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-15 06:09 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-10-15 06:06 - 2013-10-15 06:06 - 00295920 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-15 06:06 - 2012-08-01 19:02 - 00126886 _____ C:\windows\PFRO.log
2013-10-15 06:06 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-14 21:51 - 2012-07-26 10:12 - 00000000 ___RD C:\windows\ToastData
2013-10-14 21:41 - 2013-02-10 10:55 - 00000000 ____D C:\Users\KDN\AppData\Roaming\vlc
2013-10-14 19:42 - 2013-09-09 19:34 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-14 19:30 - 2013-10-14 19:30 - 00000000 ____D C:\Users\KDN\Desktop\Neuer Ordner
2013-10-13 21:33 - 2013-10-13 21:33 - 00000000 ____D C:\Users\KDN\Desktop\innung
2013-10-13 13:36 - 2013-06-02 17:26 - 00004090 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-13 13:36 - 2013-06-02 17:26 - 00003854 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-13 08:34 - 2013-02-10 08:53 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1578492395-2388186637-88415381-1001
2013-10-12 12:26 - 2013-05-31 23:14 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-10-12 10:38 - 2012-10-26 22:15 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-12 10:35 - 2013-10-12 10:35 - 00000001 _____ C:\Users\KDN\Downloads\SI.bin
2013-10-12 10:32 - 2013-10-12 10:11 - 545109723 _____ (InstallShield Software Corporation) C:\Users\KDN\Downloads\RS_Lockdown_demo.exe
2013-10-12 08:59 - 2013-10-02 23:42 - 00001350 _____ C:\Users\KDN\Desktop\Streamripper.lnk
2013-10-12 08:59 - 2013-04-05 19:09 - 00179200 ___SH C:\Users\KDN\Desktop\Thumbs.db
2013-10-11 19:22 - 2013-07-11 21:02 - 00000000 ____D C:\Users\KDN\AppData\Local\Spotify
2013-10-11 07:53 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-09 18:24 - 2013-08-07 06:26 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 18:22 - 2013-02-11 11:13 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-08 23:09 - 2013-02-19 19:52 - 00000000 ____D C:\Users\KDN\AppData\Roaming\DVDVideoSoft
2013-10-08 19:43 - 2013-02-10 17:07 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 14:42 - 2013-10-02 21:30 - 00043320 _____ (TuneUp Software) C:\windows\system32\uxtuneup.dll
2013-10-08 14:42 - 2013-10-02 21:30 - 00036152 _____ (TuneUp Software) C:\windows\SysWOW64\uxtuneup.dll
2013-10-08 14:42 - 2013-10-02 21:27 - 00040760 _____ (TuneUp Software) C:\windows\system32\TURegOpt.exe
2013-10-08 14:42 - 2013-10-02 21:27 - 00029496 _____ (TuneUp Software) C:\windows\system32\authuitu.dll
2013-10-08 14:42 - 2013-10-02 21:27 - 00025400 _____ (TuneUp Software) C:\windows\SysWOW64\authuitu.dll
2013-10-07 20:31 - 2013-10-07 20:31 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-07 20:31 - 2013-10-07 20:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-07 20:31 - 2013-08-22 13:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-07 20:10 - 2013-10-07 20:10 - 00001111 _____ C:\Users\KDN\Desktop\Continue Firefox Installation.lnk
2013-10-07 18:57 - 2013-10-07 18:57 - 00001440 _____ C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-07 17:58 - 2013-02-11 18:57 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log
2013-10-07 17:57 - 2013-02-11 18:57 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-10-06 14:09 - 2013-10-03 00:22 - 00002545 _____ C:\Users\KDN\Desktop\Search.lnk
2013-10-06 14:09 - 2013-06-02 17:28 - 00002207 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-06 14:08 - 2013-10-03 00:22 - 00002592 _____ C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2013-10-04 08:03 - 2013-02-10 08:46 - 00000000 ____D C:\Users\KDN\AppData\Local\VirtualStore
2013-10-03 18:03 - 2013-10-03 17:45 - 55458700 _____ C:\Users\KDN\Downloads\PP_KOEP-darkKO.rar
2013-10-03 12:25 - 2013-10-03 00:20 - 07392449 _____ C:\Users\KDN\AppData\Local\helper.dat
2013-10-03 12:25 - 2013-10-03 00:20 - 00089088 _____ (keepvid.com Company) C:\Users\KDN\AppData\Local\keepvid.dll
2013-10-03 12:25 - 2013-10-03 00:20 - 00000306 __RSH C:\Users\KDN\ntuser.pol
2013-10-03 11:42 - 2013-10-03 11:22 - 00002036 _____ C:\Users\KDN\Desktop\Continue installation - Music Codec Pack Installation.lnk
2013-10-03 01:15 - 2013-10-03 01:15 - 00936640 _____ C:\Users\KDN\Downloads\FLVPlayerSetup.exe
2013-10-03 00:53 - 2013-10-03 00:53 - 00002770 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-10-03 00:29 - 2013-10-03 00:29 - 00000000 ____D C:\Users\KDN\Documents\Optimizer Pro
2013-10-03 00:29 - 2013-10-03 00:29 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Optimizer Pro
2013-10-03 00:24 - 2013-10-03 00:24 - 00002098 _____ C:\Users\KDN\Desktop\AppsHat.lnk
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Local\WebPlayer
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Users\KDN\AppData\Local\Minibar
2013-10-03 00:24 - 2013-10-03 00:24 - 00000000 ____D C:\Program Files (x86)\Minibar
2013-10-03 00:24 - 2013-10-03 00:20 - 00000000 ____D C:\Program Files (x86)\SoundFrost
2013-10-03 00:23 - 2013-10-03 00:23 - 00001064 _____ C:\Users\KDN\Desktop\Optimizer Pro.lnk
2013-10-03 00:23 - 2013-10-03 00:23 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-10-03 00:23 - 2013-10-03 00:22 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-10-03 00:22 - 2013-10-03 00:22 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-10-03 00:22 - 2013-10-03 00:22 - 00000000 ____D C:\Users\KDN\AppData\Local\Wajam
2013-10-03 00:22 - 2013-10-03 00:21 - 00000000 ____D C:\Users\KDN\AppData\Local\Smartbar
2013-10-03 00:20 - 2013-10-03 00:20 - 00000000 ____D C:\Users\KDN\AppData\Local\aHaskZ3
2013-10-03 00:20 - 2012-07-26 10:12 - 00000000 ___HD C:\windows\system32\GroupPolicy
2013-10-03 00:20 - 2012-07-26 10:12 - 00000000 ____D C:\windows\SysWOW64\GroupPolicy
2013-10-03 00:18 - 2013-10-03 00:18 - 29078129 _____ (SoundFrost Company ) C:\Users\KDN\Downloads\soundfrost.exe
2013-10-02 23:09 - 2013-10-02 21:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Winamp
2013-10-02 22:19 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\setup
2013-10-02 22:19 - 2012-07-26 10:12 - 00000000 ____D C:\windows\PolicyDefinitions
2013-10-02 22:08 - 2013-10-02 22:08 - 00000000 ____D C:\Users\KDN\AppData\Roaming\streamripper
2013-10-02 22:00 - 2013-10-02 22:00 - 00000000 ____D C:\Program Files (x86)\Streamripper
2013-10-02 21:37 - 2013-10-02 21:25 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-02 21:37 - 2012-10-26 22:16 - 00000000 ____D C:\ProgramData\{AFF99647-6D64-46F2-934A-F12F468037F6}
2013-10-02 21:31 - 2013-10-02 21:25 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-02 21:26 - 2013-10-02 21:26 - 02633439 _____ C:\Users\KDN\Downloads\streamripper-windows-installer-1.64.6.exe
2013-10-02 21:26 - 2013-10-02 21:26 - 00002211 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-10-02 21:26 - 2013-10-02 21:26 - 00002191 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-10-02 21:26 - 2013-10-02 21:26 - 00000000 ____D C:\Users\KDN\AppData\Roaming\TuneUp Software
2013-10-02 21:26 - 2013-10-02 21:24 - 00000000 ____D C:\Program Files (x86)\Winamp
2013-10-02 21:24 - 2013-10-02 21:24 - 00000981 _____ C:\Users\Public\Desktop\Winamp.lnk
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\OpenCandy
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-10-02 21:24 - 2013-10-02 21:24 - 00000000 ____D C:\Program Files (x86)\Winamp Detect
2013-10-02 21:23 - 2013-10-02 21:23 - 17664368 _____ (Nullsoft, Inc.) C:\Users\KDN\Downloads\winamp565_full_emusic-7plus_all.exe
2013-10-02 20:29 - 2013-08-14 21:16 - 00000000 ____D C:\Program Files (x86)\Betcat
2013-10-02 03:38 - 2012-07-26 10:14 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2012-07-26 10:14 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 05:57 - 2013-09-30 20:13 - 98602865 _____ C:\windows\SysWOW64\ᣒㅋLİ
2013-09-29 20:13 - 2013-09-20 12:31 - 98466785 _____ C:\windows\SysWOW64\농�LĎ
2013-09-27 11:20 - 2012-10-26 22:29 - 00065134 _____ C:\windows\DirectX.log
2013-09-23 17:56 - 2013-02-10 22:26 - 00000000 ____D C:\Users\KDN\AppData\Local\Hewlett-Packard
2013-09-23 01:28 - 2013-10-09 07:16 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 07:16 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 07:16 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 07:16 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 07:15 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 07:15 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 07:15 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 07:15 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 00:55 - 2013-10-09 07:16 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 07:16 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 07:16 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 07:16 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 07:16 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 07:16 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 07:16 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-09 07:15 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 07:15 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-22 23:22 - 2013-09-22 23:22 - 00000221 _____ C:\Users\KDN\Desktop\Sniper Ghost Warrior 2 Demo.url
2013-09-22 23:22 - 2013-09-09 20:05 - 00000000 ____D C:\Users\KDN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
Some content of TEMP:
====================
C:\Users\KDN\AppData\Local\Temp\appshat-distribution.exe
C:\Users\KDN\AppData\Local\Temp\ICReinstall_Firefox_Setup.exe
C:\Users\KDN\AppData\Local\Temp\Installer.exe
C:\Users\KDN\AppData\Local\Temp\MusicCodecPack__3465_il4.exe
C:\Users\KDN\AppData\Local\Temp\OptimizerPro.exe
C:\Users\KDN\AppData\Local\Temp\WajamC.exe
C:\Users\KDN\AppData\Local\Temp\wajam_download.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-10 03:02
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by KDN at 2013-10-16 07:33:04
Running from C:\Users\KDN\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
ANNO 1404 (Demo) (x32 Version: 1.00.0000)
Anno 1404 (Demo) (x32 Version: 1.00.0000)
Apple Application Support (x32 Version: 2.3.2)
Apple Mobile Device Support (Version: 6.0.1.3)
Apple Software Update (x32 Version: 2.1.3.127)
AppsHat Mobile Apps (HKCU Version: 1.0.0.0)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Bonjour (Version: 3.0.0.10)
Bundled software uninstaller (x32)
CyberLink Power2Go 8 (x32 Version: 8.0.1.1902)
CyberLink PowerDirector 10 (x32 Version: 10.0.1.1925)
CyberLink PowerDVD (x32 Version: 10.0.1.4319)
D3DX10 (x32 Version: 15.4.2368.0902)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000)
HP Connected Music (Meridian - installer) (x32 Version: v1.0)
HP Connected Music (Meridian - player) (HKCU Version: 1.1 (build 37) hp)
HP Connected Remote (x32 Version: 1.0.1206)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Postscript Converter (Version: 3.1.3591)
HP Registration Service (Version: 1.0.5976.4186)
HP Support Assistant (x32 Version: 7.0.33.6)
HP Support Information (x32 Version: 12.00.0000)
IDT Audio (x32 Version: 1.0.6418.0)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
iTunes (Version: 11.0.1.12)
Men of War - Assault Squad - GOTY - SP demo (Remove Only) (x32 Version: 2.0.11.0)
Men of War - Assault Squad GoTY (x32)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
Norton Internet Security (x32 Version: 20.4.0.40)
NVIDIA Control Panel 305.29 (Version: 305.29)
NVIDIA Graphics Driver 305.29 (Version: 305.29)
NVIDIA HD Audio Driver 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.82.513)
NVIDIA PhysX (x32 Version: 9.12.0613)
NVIDIA PhysX System Software 9.12.0613 (Version: 9.12.0613)
Optimizer Pro v3.2 (x32)
Recovery Manager (x32 Version: 5.5.0.5530)
Rome - Total War(TM) Demo (x32 Version: 1.0)
Snap.Do (x32 Version: 1.72.1.11549)
Snap.Do Engine (HKCU Version: 1.72.1.11549)
Sniper Ghost Warrior 2 Demo (x32)
Spotify (HKCU Version: 0.9.4.178.g259772ba)
Steam (x32 Version: 1.0.0.0)
Streamripper (Remove only) (x32)
Total War: ROME II (x32)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.142)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.110)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.142)
VLC media player 2.0.5 (Version: 2.0.5)
VLC media player 2.0.7 (x32 Version: 2.0.7)
Wajam (x32 Version: 1.98)
WebCake 3.00 (Version: 3.00)
Winamp (x32 Version: 5.65 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Tanks (x32)
==================== Restore Points =========================
26-09-2013 16:00:04 Windows Modules Installer
02-10-2013 20:14:33 Windows Modules Installer
07-10-2013 16:43:45 Windows Modules Installer
12-10-2013 08:35:25 Installiert Tom Clancy's Rainbow Six: Lockdown Demo
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {06E239C8-3442-4290-B8C0-CA85F63C5E8E} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {12244F51-FF95-4F92-AC25-BEA9859B779B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {258F3128-8D9F-412F-9D7B-562901CDD71D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-10-08] (TuneUp Software)
Task: {26DB0F0B-32D7-4746-A257-0712D56FAF4D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2012-07-13] (Hewlett-Packard)
Task: {38854835-F6EA-4655-B10A-2B8DC9000796} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {49C4A929-DE6F-40A2-8A40-8B8B91294921} - System32\Tasks\DSite => C:\Users\KDN\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: {53C973FC-5CB6-4516-BB69-3A3114EE4949} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {84B83CC7-D6E8-44D0-8139-C6CDBBCEA80A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {8A0CD19D-C48F-4912-9DD8-FF8401079A7D} - System32\Tasks\HPCeeScheduleForKDN => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {90E8A832-6BF4-4BAF-9FAA-C06A73EFCE63} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {C0AF955E-7087-40FD-BA84-22C8C4328BBA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {DAD4B798-ACB6-4373-A2D1-114676C7A93B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {DE2A2EF9-600D-4D30-9C97-3FDA0DD1C1C9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-02] (Google Inc.)
Task: {F2108D55-F3D2-4D0F-BE91-8FCE49C8D03B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {FD8F2FC9-C402-49A3-A0CF-F5D574AF1C5F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-02] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForKDN.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (whitelisted) =============
2013-05-11 13:19 - 2013-01-25 10:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-03 00:23 - 2013-09-30 16:22 - 02859992 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2012-10-26 22:16 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-06-12 17:47 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2013-08-16 23:48 - 2013-08-16 23:48 - 00337920 _____ () C:\Users\KDN\AppData\Roaming\Betcat\dat\sqlite3.DLL
2012-10-26 22:23 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 12:34 - 2012-06-08 12:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 00234632 _____ () C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Resources.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 00032768 _____ () C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.Resources.resources.dll
2013-02-19 19:52 - 2012-08-20 20:07 - 04421273 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\mfc100u.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 00272544 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libcurl.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 02900128 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avformat-54.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 15055520 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avcodec-54.dll
2013-02-19 19:52 - 2013-01-28 16:49 - 00239776 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\avutil-51.dll
2013-02-19 19:52 - 2013-01-28 16:50 - 00345760 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\swscale-2.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-07 20:31 - 2013-09-11 04:26 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/15/2013 06:09:31 AM) (Source: Windows Search Service) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0.
Error: (10/15/2013 06:09:31 AM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (10/15/2013 06:09:23 AM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Error: (10/12/2013 08:38:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rome2.exe, Version: 1.4.0.0, Zeitstempel: 0x5255d8bd
Name des fehlerhaften Moduls: Rome2.dll, Version: 1.4.0.0, Zeitstempel: 0x5255d88c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0018fb9c
ID des fehlerhaften Prozesses: 0x1664
Startzeit der fehlerhaften Anwendung: 0xrome2.exe0
Pfad der fehlerhaften Anwendung: rome2.exe1
Pfad des fehlerhaften Moduls: rome2.exe2
Berichtskennung: rome2.exe3
Vollständiger Name des fehlerhaften Pakets: rome2.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: rome2.exe5
Error: (10/12/2013 08:32:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rome2.exe, Version: 1.4.0.0, Zeitstempel: 0x5255d8bd
Name des fehlerhaften Moduls: Rome2.dll, Version: 1.4.0.0, Zeitstempel: 0x5255d88c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x005ed73a
ID des fehlerhaften Prozesses: 0x2d4
Startzeit der fehlerhaften Anwendung: 0xrome2.exe0
Pfad der fehlerhaften Anwendung: rome2.exe1
Pfad des fehlerhaften Moduls: rome2.exe2
Berichtskennung: rome2.exe3
Vollständiger Name des fehlerhaften Pakets: rome2.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: rome2.exe5
Error: (10/12/2013 11:19:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Lockdown.exe, Version: 0.0.0.0, Zeitstempel: 0x43c7d690
Name des fehlerhaften Moduls: Lockdown.exe, Version: 0.0.0.0, Zeitstempel: 0x43c7d690
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001a6013
ID des fehlerhaften Prozesses: 0x1b64
Startzeit der fehlerhaften Anwendung: 0xLockdown.exe0
Pfad der fehlerhaften Anwendung: Lockdown.exe1
Pfad des fehlerhaften Moduls: Lockdown.exe2
Berichtskennung: Lockdown.exe3
Vollständiger Name des fehlerhaften Pakets: Lockdown.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Lockdown.exe5
Error: (10/12/2013 11:13:31 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Lockdown.exe, Version: 0.0.0.0, Zeitstempel: 0x43c7d690
Name des fehlerhaften Moduls: Lockdown.exe, Version: 0.0.0.0, Zeitstempel: 0x43c7d690
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001a6013
ID des fehlerhaften Prozesses: 0x1928
Startzeit der fehlerhaften Anwendung: 0xLockdown.exe0
Pfad der fehlerhaften Anwendung: Lockdown.exe1
Pfad des fehlerhaften Moduls: Lockdown.exe2
Berichtskennung: Lockdown.exe3
Vollständiger Name des fehlerhaften Pakets: Lockdown.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Lockdown.exe5
Error: (10/11/2013 06:26:03 PM) (Source: Windows Search Service) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0.
Error: (10/11/2013 06:26:03 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (10/11/2013 06:26:02 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
System errors:
=============
Error: (10/15/2013 06:07:08 AM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "AZZLAK" auf Transport "NetBT_Tcpip_{FA1F4AE3-06D4-46B4-892F-5C7D6EE32CB5}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (10/14/2013 09:52:33 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "AZZLAK" auf Transport "NetBT_Tcpip_{FA1F4AE3-06D4-46B4-892F-5C7D6EE32CB5}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (10/14/2013 06:56:20 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "AZZLAK" auf Transport "NetBT_Tcpip_{FA1F4AE3-06D4-46B4-892F-5C7D6EE32CB5}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (10/13/2013 10:17:43 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:43 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:39 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:39 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:37 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:37 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (10/13/2013 10:17:36 PM) (Source: DCOM) (User: azzlak)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office Sessions:
=========================
Error: (10/15/2013 06:09:31 AM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet. 0x0
Error: (10/15/2013 06:09:31 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Error: (10/15/2013 06:09:23 AM) (Source: Windows Search Service)(User: )
Description:
Error: (10/12/2013 08:38:05 PM) (Source: Application Error)(User: )
Description: rome2.exe1.4.0.05255d8bdRome2.dll1.4.0.05255d88cc00000050018fb9c166401cec7798da3582fC:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\rome2.exeC:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\Rome2.dll6e5631df-336d-11e3-be95-b4b52fcc00da
Error: (10/12/2013 08:32:01 PM) (Source: Application Error)(User: )
Description: rome2.exe1.4.0.05255d8bdRome2.dll1.4.0.05255d88cc0000005005ed73a2d401cec73dfbaf070cC:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\rome2.exeC:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\Rome2.dll953be4ad-336c-11e3-be95-b4b52fcc00da
Error: (10/12/2013 11:19:34 AM) (Source: Application Error)(User: )
Description: Lockdown.exe0.0.0.043c7d690Lockdown.exe0.0.0.043c7d690c0000005001a60131b6401cec72b5867a279C:\Program Files (x86)\Ubisoft\Red Storm Entertainment\Rainbow Six Lockdown Demo\Lockdown.exeC:\Program Files (x86)\Ubisoft\Red Storm Entertainment\Rainbow Six Lockdown Demo\Lockdown.exe67e394c7-331f-11e3-be95-b4b52fcc00da
Error: (10/12/2013 11:13:31 AM) (Source: Application Error)(User: )
Description: Lockdown.exe0.0.0.043c7d690Lockdown.exe0.0.0.043c7d690c0000005001a6013192801cec726b8039864C:\Program Files (x86)\Ubisoft\Red Storm Entertainment\Rainbow Six Lockdown Demo\Lockdown.exeC:\Program Files (x86)\Ubisoft\Red Storm Entertainment\Rainbow Six Lockdown Demo\Lockdown.exe8ffd4cc6-331e-11e3-be95-b4b52fcc00da
Error: (10/11/2013 06:26:03 PM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet. 0x0
Error: (10/11/2013 06:26:03 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Anwendung, SystemIndex Katalog
Error: (10/11/2013 06:26:02 PM) (Source: Windows Search Service)(User: )
Description:
CodeIntegrity Errors:
===================================
Date: 2013-02-19 18:12:05.070
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Unlocker\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-19 18:12:05.055
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Unlocker\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 51%
Total physical RAM: 4049.02 MB
Available physical RAM: 1959.72 MB
Total Pagefile: 5041.02 MB
Available Pagefile: 1895.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:918.83 GB) (Free:165.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:11.21 GB) (Free:1.36 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (Rome2 Disc 3) (CDROM) (Total:4.39 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: E9D9D320)
Partition: GPT Partition Type
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-16 07:51:14
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000033 ST31000524AS rev.HP64 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\KDN\AppData\Local\Temp\uflorpod.sys
---- Kernel code sections - GMER 2.1 ----
.text C:\windows\System32\win32k.sys!W32pServiceTable fffff9600011ea00 7 bytes [40, CA, 81, 01, 00, 4C, F2]
.text C:\windows\System32\win32k.sys!W32pServiceTable + 8 fffff9600011ea08 7 bytes [01, EA, BF, FF, 00, C7, DA]
---- User code sections - GMER 2.1 ----
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[3624] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007fa10cf1532 4 bytes [CF, 10, FA, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[3624] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007fa10cf153a 4 bytes [CF, 10, FA, 07]
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[3624] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007fa10cf165a 4 bytes [CF, 10, FA, 07]
.text C:\windows\system32\nvvsvc.exe[3656] C:\windows\system32\MSIMG32.dll!GradientFill + 690 000007fa10cf1532 4 bytes [CF, 10, FA, 07]
.text C:\windows\system32\nvvsvc.exe[3656] C:\windows\system32\MSIMG32.dll!GradientFill + 698 000007fa10cf153a 4 bytes [CF, 10, FA, 07]
.text C:\windows\system32\nvvsvc.exe[3656] C:\windows\system32\MSIMG32.dll!TransparentBlt + 246 000007fa10cf165a 4 bytes [CF, 10, FA, 07]
.text C:\windows\system32\nvvsvc.exe[3656] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007fa156b177a 4 bytes [6B, 15, FA, 07]
.text C:\windows\system32\nvvsvc.exe[3656] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007fa156b1782 4 bytes [6B, 15, FA, 07]
.text C:\windows\Explorer.EXE[1580] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007fa156b177a 4 bytes [6B, 15, FA, 07]
.text C:\windows\Explorer.EXE[1580] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007fa156b1782 4 bytes [6B, 15, FA, 07]
.text C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe[5524] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007fa156b177a 4 bytes [6B, 15, FA, 07]
.text C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe[5524] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007fa156b1782 4 bytes [6B, 15, FA, 07]
.text C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe[4944] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007fa156b177a 4 bytes [6B, 15, FA, 07]
.text C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe[4944] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007fa156b1782 4 bytes [6B, 15, FA, 07]
---- Threads - GMER 2.1 ----
Thread C:\windows\SYSTEM32\ntdll.dll [696:2228] 0000000000951c24
Thread C:\windows\SYSTEM32\ntdll.dll [696:2880] 00000000709ee54e
Thread C:\windows\SYSTEM32\ntdll.dll [696:2928] 000000006f4eeec8
Thread C:\windows\SYSTEM32\ntdll.dll [696:952] 000000006f4eeec8
Thread C:\windows\SYSTEM32\ntdll.dll [696:676] 000000006f4eeec8
Thread C:\windows\SYSTEM32\ntdll.dll [696:2808] 000000006f94319b
Thread C:\windows\SYSTEM32\ntdll.dll [696:568] 000000006edc7019
Thread C:\windows\SYSTEM32\ntdll.dll [696:4236] 0000000065e016dc
Thread C:\windows\system32\csrss.exe [3508:5048] fffff960008be5e8
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
|
|
16.10.2013, 10:05
| #4 |
| /// TB-Ausbilder | Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? Hi, da ist einiges an Mist drauf..  Hinweis: Mehrere AV-HintergrundwächterMir ist aufgefallen, dass du mehr als ein Antivirus-Programm mit Hintergrundwächter laufen hast:
Entscheide dich für eines dieser Programme und deinstalliere die anderen über die Systemsteuerung. Schritt 1
Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
Bitte poste in deiner nächsten Antwort:
__________________ cheers, Leo |
|
22.10.2013, 21:15
| #5 |
| /// TB-Ausbilder | Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? Hi, ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe? Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.
__________________ cheers, Leo |
|
29.10.2013, 23:06
| #6 |
| /// TB-Ausbilder | Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? Fehlende Rückmeldung Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten. Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass dein Rechner schon sauber ist. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ --> Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? |
|
| Themen zu Mein PC läuft nur noch sehr langsam, nicht mal AVIRA funktiomiert noch. Woran kann das liegen? |
| avira, beste, besten, check, dankbar, hilfe, komplette, langsam, pc läuft, pcs, sehr langsam, system, woran |
Linear-Darstellung
