| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: ad.yieldmanager & ib.adnsx Pop Up Virus entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
11.11.2013, 14:05
| #1 |
| |  ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Hallo, ich hab mir nach Jahren tatsächlich aufeinmal wieder irgendwas eingefangen im Internet. Erst war es der ib.adnsx Pop up Virus, dann snap.do und eine andere seltsame suchmaschine (was ich alleine wegbekommen habe ) und nun ist zudem noch ad.yieldmanager aufgetaucht der ib.adnsx sehr ähnelt. Ich stosse hier an meine Grenzen mit dem entfernen. Ich habe es mit Spybot, Malware Bites, CCleaner, hijackthis, junk removal tool und avast versucht. Leider hab ich mir auch Spyhunter geladen gehabt wo ich erst nachher erfuhr, dass das auch nur ein versteckes Trojaner Programm ist. Das konnte ich aber mit Malware Bites wieder entfernen. Die Seiten die mir google ausgespuckt hat , als ich selbst nach einer Lösung suchte, sahen auch alles andere als legitim aus... Hab hier rumgestöbert und gesehen, dass einigen Leuten geholfen wurde bei dem selben Problem in dem sie die Logs gepostet haben wo man ihnen dann erklärt hat wies weitergeht. Wollte um die selbe Hilfe bitten.  Auch hätte ich nichts dagegen jemandem über Teamviewer die Lenkung meines Computers anzuvertrauen. hoffe jemand kann mir helfen mfG Mym |
|
11.11.2013, 14:17
| #2 |
| /// the machine /// TB-Ausbilder    | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
11.11.2013, 21:50
| #3 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Vielen dank für die schnelle Antwort!
__________________Also als ich auf scan geklickt habe, kam erstmal das hier:  kA ob das wichtig ist!  hier dann FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01
Ran by Myriam (administrator) on MAINPC on 11-11-2013 21:44:58
Running from C:\Users\Myriam\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Ginyas Browser Companion Agent) C:\ProgramData\youtubegizm\tytghn.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374864 2012-07-25] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [213856 2012-10-08] (Trend Micro Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\WINDOWS\skipmetrosuite.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3050A J611 series (NET)] - C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Facebook Update] - C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-21] (Facebook Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-21] ()
HKCU\...\Run: [Google Update] - C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-16] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pokki] - C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Easy Update] - C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200 2012-05-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [78352 2012-05-23] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-04-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-11-04] (AVAST Software)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL [21864 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [20328 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Myriam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.dosearches.com/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=sc&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D48NS1XXXXS1D48NS1&ts=1383922317&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=ds&q={searchTerms}&installDate=02/11/2013
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=ds&q={searchTerms}&installDate=02/11/2013
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PodcastBHO Class - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ygBHO Class - {ed1e27f0-1bcd-42a4-ad62-7fc21e086e54} - C:\Program Files (x86)\youtubegizm\jsloader.dll (youtubegizmos.com)
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default
FF NewTab: hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=nt&installDate=02/11/2013
FF Homepage: hxxp://www.google.lu/
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=ds&installDate=02/11/2013&q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('.brightcove.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @Skype.com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @doubletwist.com/NPPodcast - C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll (doubleTwist Corporation)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Myriam\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Myriam\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: youtubegizmos - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\tb@youtubegizmos.com
FF Extension: client - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\client@anonymox.net.xpi
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: gadrm - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
FF Extension: Adblock Plus - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{21541D23-FDA1-4bf3-8AF2-8F623BF70B07}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR RestoreOnStartup: "https://www.google.lu/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.lu/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) - "suggest_url": "",
CHR Extension: (TrendMicro BEP Extension) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmiabdepfhhiieiipmeecdmeljggmfee\7.5.0.1115_1
CHR Extension: (AdBlock) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (ProxMate - Proxy on steroids!) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki\3.1.6_0
CHR Extension: (Lyrics for Youtube) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhdoalfjomgiohmljhhfdipjlbejaejm\2.0.3_0
CHR Extension: (Google Wallet) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [ccncljhbalbbkkfgopogabimepmfkmff] - C:\Program Files (x86)\BatBrowse\ccncljhbalbbkkfgopogabimepmfkmff.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-04] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-04-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-04-19] (BlueStack Systems, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143024 2012-10-10] (Stardock Software, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-11-14] (Wacom Technology, Corp.)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-11-04] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-11-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-11-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-04] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-04-19] (BlueStack Systems)
S3 DroidCam; C:\Windows\system32\drivers\droidcam.sys [25216 2013-02-27] (Dev47Apps)
R1 tmactmon; C:\Windows\system32\DRIVERS\tmactmon.sys [106000 2012-07-12] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-07-12] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.)
S3 tmeevw; C:\Windows\system32\DRIVERS\tmeevw.sys [98104 2012-08-25] (Trend Micro Inc.)
S0 tmel; C:\Windows\System32\DRIVERS\tmel.sys [34224 2012-07-27] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\system32\DRIVERS\tmevtmgr.sys [76672 2012-07-12] (Trend Micro Inc.)
R2 tmusa; C:\Windows\system32\DRIVERS\tmusa.sys [77112 2012-09-11] (Trend Micro Inc.)
S3 USBET; C:\Windows\system32\DRIVERS\ETdrv.sys [6408576 2010-11-10] (Etron)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-11 21:44 - 2013-11-11 21:44 - 01957590 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 17:20 - 2013-11-08 17:20 - 03572478 _____ C:\Users\Myriam\Downloads\proxmate.crx
2013-11-08 17:20 - 2013-11-08 17:20 - 03572478 _____ C:\Users\Myriam\Downloads\proxmate (1).crx
2013-11-08 16:09 - 2013-11-08 16:09 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 16:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-08 15:52 - 2013-11-08 16:56 - 00000000 ____D C:\ProgramData\eSafe
2013-11-08 14:24 - 2013-11-11 21:34 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-08 14:24 - 2013-11-08 17:18 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-08 14:24 - 2013-11-08 14:29 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:23 - 2013-11-11 14:34 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-08 14:23 - 2013-11-08 14:29 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:38 - 2013-11-09 12:58 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-04 14:35 - 2013-11-04 16:36 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-02 16:54 - 2013-11-08 22:42 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-02 15:18 - 2012-07-26 06:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131102-151827.backup
2013-11-02 14:29 - 2013-11-02 14:29 - 00001386 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2013-11-02 14:28 - 2013-11-02 15:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:28 - 2013-11-02 14:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:37 - 2013-11-01 21:20 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 20:37 - 2013-11-01 21:09 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-04 19:26 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:19 - 2013-11-02 13:44 - 00000000 ____D C:\AdwCleaner
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 11:53 - 2013-11-08 14:17 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 13:31 - 2013-10-22 13:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-20 19:05 - 2013-11-11 21:45 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-10-20 19:05 - 2013-11-11 21:45 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-10-20 19:05 - 2013-11-11 21:17 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-10-20 19:05 - 2013-11-11 21:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-10-20 19:05 - 2013-11-11 13:57 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-10-20 19:05 - 2013-11-11 13:47 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-10-20 19:05 - 2013-10-26 19:15 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-20 19:05 - 2013-10-22 19:15 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-20 19:05 - 2013-10-20 19:05 - 00003964 _____ C:\WINDOWS\System32\Tasks\youtubegizm Runner
2013-10-20 19:05 - 2013-10-20 19:05 - 00003636 _____ C:\WINDOWS\System32\Tasks\youtubegizm Update Checker
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\ProgramData\youtubegizm
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\Program Files (x86)\youtubegizm
2013-10-17 11:40 - 2013-10-17 11:40 - 00031276 _____ C:\Users\Myriam\Documents\Bewertung - Formal korrektes Arbeiten.htm
2013-10-15 16:46 - 2013-11-02 13:22 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-14 19:14 - 2013-10-14 19:14 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\LolClient
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\Documents\Add-in Express
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\AppData\Local\WinZip
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\ProgramData\WinZip
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Program Files\WinZip
2013-10-14 12:41 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-10-14 12:41 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-10-14 12:41 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-10-14 12:41 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-10-14 12:41 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-14 12:41 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-14 12:40 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2013-10-14 12:40 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2013-10-14 12:40 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2013-10-14 12:40 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2013-10-14 12:40 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2013-10-14 12:40 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2013-10-14 12:40 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2013-10-14 12:40 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2013-10-14 12:40 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2013-10-14 12:40 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2013-10-14 12:40 - 2013-08-02 07:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-10-14 12:40 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2013-10-14 12:40 - 2013-08-02 06:06 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-10-14 12:40 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-10-14 12:40 - 2013-07-31 00:30 - 00386923 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-10-14 12:40 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2013-10-14 12:40 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
==================== One Month Modified Files and Folders =======
2013-11-11 21:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-11-11 21:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-11-11 21:44 - 2013-11-11 21:44 - 01957590 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-11 21:44 - 2013-03-14 19:37 - 00000000 ____D C:\Users\Myriam\AppData\Local\Pokki
2013-11-11 21:44 - 2013-02-03 20:54 - 03144192 ___SH C:\Users\Myriam\Desktop\Thumbs.db
2013-11-11 21:37 - 2013-03-04 13:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-11 21:37 - 2013-01-03 21:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\Sidebar7
2013-11-11 21:34 - 2013-11-08 14:24 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-11 21:21 - 2013-01-03 21:43 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Skype
2013-11-11 21:17 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-11-11 21:05 - 2013-10-20 19:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-11-11 21:00 - 2013-06-29 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-11 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-11 17:13 - 2013-09-30 21:59 - 01649617 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-11 15:00 - 2013-08-11 23:03 - 00005068 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MAINPC-Myriam MainPC
2013-11-11 14:34 - 2013-11-08 14:23 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-11 13:57 - 2013-10-20 19:05 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-11-11 13:53 - 2012-09-03 10:35 - 00761898 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-11 13:53 - 2012-09-03 10:35 - 00160028 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-11 13:53 - 2012-07-26 08:28 - 01772590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-11 13:47 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-11-11 13:46 - 2012-09-08 23:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-11 13:46 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-11 13:37 - 2013-03-04 13:27 - 00000874 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-09 15:01 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-09 13:38 - 2013-04-03 13:02 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Mozilla
2013-11-09 12:59 - 2013-01-21 18:54 - 00000946 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-09 12:58 - 2013-11-04 16:38 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-09 12:58 - 2013-01-03 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 22:42 - 2013-11-02 16:54 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-08 22:04 - 2013-01-06 00:05 - 00000000 ____D C:\Users\Myriam\Documents\MAGIX_MusicMaker16Premium_Download-Version
2013-11-08 18:59 - 2013-01-21 18:54 - 00000924 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-08 17:34 - 2013-01-03 22:28 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Media Player Classic
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 17:25 - 2013-05-12 14:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 17:20 - 2013-11-08 17:20 - 03572478 _____ C:\Users\Myriam\Downloads\proxmate.crx
2013-11-08 17:20 - 2013-11-08 17:20 - 03572478 _____ C:\Users\Myriam\Downloads\proxmate (1).crx
2013-11-08 17:18 - 2013-11-08 14:24 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-08 17:18 - 2013-01-03 19:28 - 00001445 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 16:56 - 2013-11-08 15:52 - 00000000 ____D C:\ProgramData\eSafe
2013-11-08 16:22 - 2013-01-03 19:35 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3874095498-2534434736-829293843-1001
2013-11-08 16:09 - 2013-11-08 16:09 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 14:29 - 2013-11-08 14:24 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:29 - 2013-11-08 14:23 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-08 14:24 - 2013-01-03 19:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-08 14:23 - 2013-01-03 19:39 - 00000000 ____D C:\Users\Myriam\AppData\Local\Deployment
2013-11-08 14:17 - 2013-10-26 11:53 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-11-07 18:43 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-06 22:58 - 2013-01-03 22:19 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\vlc
2013-11-04 19:26 - 2013-11-01 19:42 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-04 19:26 - 2013-01-04 03:49 - 00000000 ____D C:\ProgramData\MFAData
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:39 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 16:37 - 2013-01-15 22:13 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 16:36 - 2013-11-04 14:35 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\Users\Myriam\AppData\Local\PMB Files
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-03 11:55 - 2013-01-03 19:26 - 00000000 ____D C:\Users\Myriam
2013-11-02 17:18 - 2013-02-26 00:12 - 00005632 _____ C:\Users\Myriam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 15:12 - 2013-11-02 14:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:29 - 2013-11-02 14:29 - 00001386 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-11-02 14:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-02 13:44 - 2013-10-30 18:19 - 00000000 ____D C:\AdwCleaner
2013-11-02 13:22 - 2013-10-15 16:46 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 20:37 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 21:20 - 2013-01-23 19:34 - 00000000 ____D C:\Users\Myriam\AppData\Local\Downloaded Installations
2013-11-01 21:20 - 2013-01-04 00:37 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Sony
2013-11-01 21:09 - 2013-11-01 20:37 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:47 - 2013-01-03 19:27 - 00000000 ____D C:\Users\Myriam\AppData\Local\VirtualStore
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:05 - 2013-07-18 00:11 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:49 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 19:35 - 2013-02-17 16:41 - 00000000 ____D C:\Users\Myriam\Desktop\WOHNUNG
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:20 - 2013-01-04 00:19 - 00000000 ____D C:\ProgramData\Uniblue
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 23:22 - 2013-01-22 02:08 - 00000000 ___RD C:\Users\Myriam\Dropbox
2013-10-26 23:22 - 2013-01-22 02:04 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Dropbox
2013-10-26 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 20:19 - 2013-01-03 19:28 - 00000000 ___RD C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-22 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-22 13:39 - 2013-10-22 13:31 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-20 19:05 - 2013-10-20 19:05 - 00003964 _____ C:\WINDOWS\System32\Tasks\youtubegizm Runner
2013-10-20 19:05 - 2013-10-20 19:05 - 00003636 _____ C:\WINDOWS\System32\Tasks\youtubegizm Update Checker
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\ProgramData\youtubegizm
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\Program Files (x86)\youtubegizm
2013-10-20 18:11 - 2013-01-03 21:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-17 11:40 - 2013-10-17 11:40 - 00031276 _____ C:\Users\Myriam\Documents\Bewertung - Formal korrektes Arbeiten.htm
2013-10-16 22:24 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache
2013-10-15 17:04 - 2013-01-03 19:28 - 00000000 ___RD C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-14 21:46 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-10-14 19:16 - 2013-05-12 14:15 - 00000000 ____D C:\Users\Myriam\AppData\Local\Mozilla
2013-10-14 19:14 - 2013-10-14 19:14 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\LolClient
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\Documents\Add-in Express
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\AppData\Local\WinZip
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\ProgramData\WinZip
2013-10-14 13:16 - 2013-10-14 13:16 - 00000000 ____D C:\Program Files\WinZip
2013-10-14 13:01 - 2013-08-15 13:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-14 12:58 - 2013-01-04 22:06 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-14 12:32 - 2013-03-04 13:27 - 00003874 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA
2013-10-14 12:32 - 2013-03-04 13:27 - 00003494 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-08 16:22
==================== End Of Log ============================
und addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2013 01
Ran by Myriam at 2013-11-11 21:46:22
Running from C:\Users\Myriam\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {B7599298-8445-728A-A5C7-A26A082C8BDA}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {0C38737C-A27F-7D04-9F77-991873ABC167}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
8GadgetPack (x32 Version: 4.1.0)
Adobe After Effects CS4 (x32 Version: 9)
Adobe After Effects CS4 Presets (x32 Version: 9)
Adobe After Effects CS4 Third Party Content (x32 Version: 9)
Adobe AIR (x32 Version: 2.5.1.17730)
Adobe Anchor Service CS4 (x32 Version: 2.0)
Adobe Anchor Service x64 CS4 (Version: 2.0)
Adobe Bridge CS4 (x32 Version: 3)
Adobe CMaps CS4 (x32 Version: 2.0)
Adobe CMaps x64 CS4 (Version: 2.0)
Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0)
Adobe Color EU Extra Settings CS4 (x32 Version: 2.0)
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0)
Adobe Color NA Recommended Settings CS4 (x32 Version: 2.0)
Adobe Color Video Profiles AE CS4 (x32 Version: 2.0)
Adobe Color Video Profiles CS CS4 (x32 Version: 2.0)
Adobe Community Help (x32 Version: 3.4.980)
Adobe CSI CS4 (x32 Version: 1)
Adobe CSI CS4 x64 (Version: 1)
Adobe Default Language CS4 (x32 Version: 2.0)
Adobe Device Central CS4 (x32 Version: 2)
Adobe Drive CS4 x64 (Version: 1)
Adobe Dynamiclink Support (x32 Version: 1)
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0)
Adobe Extension Manager CS4 (x32 Version: 2.0)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Fonts All (x32 Version: 2.0)
Adobe Fonts All x64 (Version: 2.0)
Adobe Linguistics CS4 (x32 Version: 4.0.0)
Adobe Linguistics CS4 x64 (Version: 4.0.0)
Adobe Media Encoder CS4 (x32 Version: 1.0)
Adobe Media Encoder CS4 Additional Exporter (x32 Version: 1.0)
Adobe Media Encoder CS4 Exporter (x32 Version: 1.0)
Adobe Media Encoder CS4 Importer (x32 Version: 1.0)
Adobe Media Player (x32 Version: 0.0.0)
Adobe Media Player (x32 Version: 1.1)
Adobe MotionPicture Color Files CS4 (x32 Version: 2.0)
Adobe Output Module (x32 Version: 2.0)
Adobe PDF Library Files CS4 (x32 Version: 9.0)
Adobe PDF Library Files x64 CS4 (Version: 9.0)
Adobe Photoshop CS4 (64 Bit) (Version: 11.0)
Adobe Photoshop CS4 (x32 Version: 11.0)
Adobe Photoshop CS4 Support (x32 Version: 11.0)
Adobe Premiere Pro CS5.5 (x32 Version: 5.5)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Search for Help (x32 Version: 1.0)
Adobe Service Manager Extension (x32 Version: 1.0)
Adobe Setup (x32 Version: 2.0)
Adobe Story (x32 Version: 1.0.571)
Adobe Type Support CS4 (x32 Version: 9.0)
Adobe Type Support x64 CS4 (Version: 9.0)
Adobe Update Manager CS4 (x32 Version: 6.0.0)
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1)
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1)
Adobe XMP Panels CS4 (x32 Version: 2.0)
AdobeColorCommonSetCMYK (x32 Version: 2.0)
AdobeColorCommonSetRGB (x32 Version: 2.0)
AI Suite II (x32 Version: 2.00.01)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ASUS Easy Update (x32 Version: 2.00.28)
ASUS Music Maker (Version: 18.0.3.3)
ASUS Music Maker (x32 Version: 18.0.3.3)
ASUS MX Suite (Version: 1.13.0.121)
ASUS MX Suite (x32 Version: 1.13.0.121)
ASUS Video easy (Version: 3.0.1.42)
ASUS Video easy (x32 Version: 3.0.1.42)
ASUSDVD (x32 Version: 10.0.4126.52)
Audacity 2.0.2 (x32 Version: 2.0.2)
avast! Free Antivirus (x32 Version: 9.0.2006)
AVS Image Converter 2.0.2.160 (x32)
AVS Update Manager 1.0 (x32)
AVS4YOU Software Navigator 1.4 (x32)
Bamboo (Version: 5.3.0-3)
BitSpirit v3.6.0.550 Stable (x32)
BlueStacks App Player (x32 Version: 0.7.11.885)
BlueStacks Notification Center (x32 Version: 0.7.11.885)
Bonjour (Version: 3.0.0.10)
Camtasia Studio 7 (x32 Version: 7.0.0)
CCleaner (Version: 3.26)
Celtx (2.9.1) (x32 Version: 2.9.1 (en-US))
Connect (x32 Version: 1.0.0.1)
D3DX10 (x32 Version: 15.4.2368.0902)
DebugMode PluginPac (remove only) (x32)
doubleTwist (x32 Version: 3.2.1.14961)
Dropbox (HKCU Version: 2.0.22)
eManual (x32 Version: 1.00.00)
Explorer Suite IV
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
FastStone Photo Resizer 3.1 (x32 Version: 3.1)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)
Fotogalerie (x32 Version: 16.4.3503.0728)
Galeria de Fotografias (x32 Version: 16.4.3503.0728)
Galería de fotos (x32 Version: 16.4.3503.0728)
Galerie de photos (x32 Version: 16.4.3503.0728)
Google Chrome (x32 Version: 30.0.1599.101)
Google Talk Plugin (x32 Version: 4.9.1.16010)
Google Update Helper (x32 Version: 1.3.21.165)
GPL Ghostscript (x32 Version: 9.05)
HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP ePrint (x32 Version: 6.0.12230.783)
HP Postscript Converter (Version: 3.1.3591)
HP Unified IO (Version: 2.0.0.404)
HP Unified IO (x32 Version: 2.0.0.404)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
IrfanView (remove only) (x32 Version: 4.35)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
K-Lite Codec Pack 9.6.5 (Full) (x32 Version: 9.6.5)
kuler (x32 Version: 2.0)
League of Legends (x32 Version: 3.0.1)
Magic Bullet Looks Vegas (x32)
Magic Bullet Suite 32-bit (x32 Version: 11.4.1)
Magic Bullet Suite 64-bit (Version: 11.4.1)
Magic Bullet Suite 64-bit (x32 Version: 11.4.1)
MAGIX Music Maker 16 Premium Download-Version (x32 Version: 16.0.0.30)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MAGIX Speed burnR (x32 Version: 7.0.1.27)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Manga Studio (x32 Version: 5.0.0)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft SkyDrive (HKCU Version: 17.0.2003.1112)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Movie Maker (x32 Version: 16.4.3503.0728)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 25.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1108.0727)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Nero 12 Essentials OEM.a01 (x32 Version: 12.5.00400)
Nero ControlCenter (x32 Version: 11.0.15200)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.0003)
Nero Core Components (x32 Version: 11.0.17800)
Nero Express (x32 Version: 12.0.19000)
Nero Express Help (CHM) (x32 Version: 12.0.1000)
Nero Launcher (x32 Version: 12.2.2000)
Nero Update (x32 Version: 11.0.11800.31.0)
NewBlue 3D Explosions for Vegas (x32)
NewBlue 3D Transformations for Vegas (x32)
NewBlue Art Blends 2.0 for Vegas (x32)
NewBlue Art Effects 2.0 for Vegas (x32)
NewBlue Film Effects for Vegas (x32)
NewBlue Motion Blends 2.0 for Vegas (x32)
NewBlue Motion Effects 2.0 for Vegas (x32)
No23 Recorder (x32 Version: 2.1.0.3)
NVIDIA 3D Vision Controller-Treiber 305.46 (Version: 305.46)
NVIDIA 3D Vision Treiber 305.46 (Version: 305.46)
NVIDIA Grafiktreiber 305.46 (Version: 305.46)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.82.513)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX System Software 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0546)
NVIDIA Systemsteuerung 305.46 (Version: 305.46)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Pando Media Booster (x32 Version: 2.6.0.8)
PDF Settings CS4 (x32 Version: 9.0)
Photo Common (x32 Version: 16.4.3503.0728)
Photo Gallery (x32 Version: 16.4.3503.0728)
Photoshop Camera Raw (x32 Version: 5.0)
Photoshop Camera Raw_x64 (Version: 5.0)
Pixel Bender Toolkit (x32 Version: 1.0)
Pokki (HKCU Version: 0.266.1.172)
Pokki Download Helper (HKCU Version: 1.3.1.282)
PowerISO (x32 Version: 5.5)
Prerequisite installer (x32 Version: 12.0.0002)
Preset Manager 2.0 (x32 Version: 2.0.114)
PxMergeModule (x32 Version: 1.00.0000)
QuickTime (x32 Version: 7.60.92.0)
Raccolta foto (x32 Version: 16.4.3503.0728)
Ragnarok Online2 (x32 Version: 2.00.0000)
Ralink RT2860 Wireless LAN Card (x32 Version: 1.2.0.40)
RAR Password Unlocker (x32)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6657)
Skype Web Plugin (x32 Version: 2.2.12059.16911)
Skype™ 6.10 (x32 Version: 6.10.104)
Snap.Do (x32 Version: 1.188.1.12755)
Sony Noise Reduction Plug-In 2.0h (x32 Version: 2.0.451)
Sony Vegas 5.0a (x32 Version: 5.0.134)
SpiceMASTER 2.5 PRO for Vegas (x32 Version: 2.5)
Spybot - Search & Destroy (x32 Version: 2.2.25)
Start8 (Version: 1.0)
Suite Shared Configuration CS4 (x32 Version: 1.0)
Sweet Home 3D version 3.7 (x32)
TeamViewer 8 (x32 Version: 8.0.22298)
Text-To-Speech-Runtime (x32 Version: 1.0.0.0)
Tombraider (x32)
Trend Micro Titanium (Version: 6.00)
Trend Micro Titanium Internet Security (Version: 6.0)
Vegas Pro 9.0 (x32 Version: 9.0.563)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VLC media player 2.0.5 (x32 Version: 2.0.5)
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.2)
WebTablet FB Plugin 64 bit (Version: 2.1.0.2)
Why ASUS PC (x32 Version: 1.00.02)
Windows Live (x32 Version: 16.4.3503.0728)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728)
Windows Live Essentials (x32 Version: 16.4.3503.0728)
Windows Live Installer (x32 Version: 16.4.3503.0728)
Windows Live Photo Common (x32 Version: 16.4.3503.0728)
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728)
Windows Live SOXE (x32 Version: 16.4.3503.0728)
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728)
Windows Live UX Platform (x32 Version: 16.4.3503.0728)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728)
Windows Live 程式集 (x32 Version: 16.4.3503.0728)
Windows Live 软件包 (x32 Version: 16.4.3503.0728)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinZip 17.5 (Version: 17.5.10562)
YouTube lyrics (x32)
YTD Video Downloader 4.3 (x32 Version: 4.3)
Συλλογή φωτογραφιών (x32 Version: 16.4.3503.0728)
影像中心 (x32 Version: 16.4.3503.0728)
照片库 (x32 Version: 16.4.3503.0728)
==================== Restore Points =========================
10-11-2013 16:29:06 Windows Update
==================== Hosts content: ==========================
2012-07-26 06:26 - 2013-11-02 15:18 - 00450639 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {066D6F09-4BD6-490C-BF6A-729C33FA0892} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {0A6D0A0B-74EB-4C0D-9DF9-57BFA540885E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {13E843E9-6509-4C82-82ED-5779A1F26779} - System32\Tasks\youtubegizm Runner => C:\ProgramData\youtubegizm\tytghn.exe [2013-10-14] (Ginyas Browser Companion Agent)
Task: {1852A086-48F8-4960-B54D-1F6C7F4F6CF9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-08] (Google Inc.)
Task: {18DF4CF5-48CB-446A-A1D3-DA6C9881C70D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {4B6D5E2F-CE47-4886-BF29-A2923F28EE98} - System32\Tasks\Microsoft\Windows\Setup\Windows Upgrade Notification Task => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {4F76AC91-F719-43FE-BD72-F049DA0BB042} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {4F9A6342-70BA-4900-8D48-D46D0C990D88} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {4FB131ED-879B-4EC9-89BB-4B7966370F34} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA => C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-21] (Facebook Inc.)
Task: {58A52910-D1B3-4019-95C4-A74051277D9A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA => C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-16] (Google Inc.)
Task: {5D61EB2E-5290-405C-88B9-426736A99773} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: {63569292-E4E6-4259-A7D5-7EB9973938BA} - System32\Tasks\Google Updater and Installer => C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-16] (Google Inc.)
Task: {6BB95988-C226-41B0-9C46-BB22539426DE} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {70F7733B-02A7-4BFB-9619-9B8BD3B26A55} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {7C07547B-84F3-4F57-B600-D2970CB16E80} - System32\Tasks\youtubegizm Update Checker => C:\ProgramData\youtubegizm\tytghn.exe [2013-10-14] (Ginyas Browser Companion Agent)
Task: {8806BEEF-0CB5-4517-B9F9-72BB5CD55637} - System32\Tasks\youtubegizm FireFox Watcher => C:\ProgramData\youtubegizm\tytghn.exe [2013-10-14] (Ginyas Browser Companion Agent)
Task: {8933542B-60B5-44B4-B039-CBCC794274D8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {8A1A645B-3AAC-45F4-8D6B-28486DDE8568} - System32\Tasks\youtubegizm Chrome Watcher => C:\ProgramData\youtubegizm\tytghn.exe [2013-10-14] (Ginyas Browser Companion Agent)
Task: {916D4016-32D4-470C-B047-F182A32F61B1} - System32\Tasks\youtubegizm Stats Report => C:\ProgramData\youtubegizm\tytghn.exe [2013-10-14] (Ginyas Browser Companion Agent)
Task: {A9D2EDC4-A2AA-4913-962E-9730D1AC5E56} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {AB42BC5C-9690-4CA7-9E41-132C943E7E62} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core => C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-21] (Facebook Inc.)
Task: {AC3A8EDD-685A-4487-88AB-85E3EDA77483} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {BB7881BD-36DB-4D65-9D56-0BB6B47B8B45} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {C1E3E403-0FC8-47BE-AF76-F6A709192B4C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {C5529167-6FDF-4852-A1F3-E0F88FBBCCEE} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {C95B9DE3-ECF8-4529-B093-900A62B134F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core => C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-16] (Google Inc.)
Task: {D0901476-1AE9-43B8-BC40-9CD4E9CF55E9} - System32\Tasks\Microsoft Office 15 Sync Maintenance for MAINPC-Myriam MainPC => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [2012-10-01] (Microsoft Corporation)
Task: {D0E641F5-5737-427A-A5A7-072FBC2C3529} - System32\Tasks\ASUS-Online-Aktualisierungsprogramm => C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [2012-05-24] (ASUSTeK Computer Inc.)
Task: {D7AC23DD-DA5B-4AB6-9339-78C430329062} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {E27CC815-8B45-430F-A25B-2D6AC58AD593} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-08] (Google Inc.)
Task: {E77940BF-52E4-4A3A-8943-111E779E0CAF} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Common\Red Giant Link.exe [2013-02-21] ()
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job => C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job => C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job => C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job => C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job => C:\ProgramData\youtubegizm\tytghn.exe
Task: C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job => C:\ProgramData\youtubegizm\tytghn.exe
Task: C:\WINDOWS\Tasks\youtubegizm Runner.job => C:\ProgramData\youtubegizm\tytghn.exe
Task: C:\WINDOWS\Tasks\youtubegizm Stats Report.job => C:\ProgramData\youtubegizm\tytghn.exe
Task: C:\WINDOWS\Tasks\youtubegizm Update Checker.job => C:\ProgramData\youtubegizm\tytghn.exe
==================== Loaded Modules (whitelisted) =============
2013-11-01 06:31 - 2013-11-01 06:31 - 02329928 _____ () C:\Users\Myriam\AppData\Local\Pokki\ocdeskband_0.dll
2013-01-04 14:59 - 2012-11-14 14:45 - 01184640 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-11-11 13:50 - 2013-11-11 11:17 - 02140672 _____ () C:\Program Files\AVAST Software\Avast\defs\13111100\algo.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-09-03 11:44 - 2013-11-11 13:47 - 00021504 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2012-09-03 11:44 - 2010-06-29 03:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2013-11-02 14:28 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-11-02 14:28 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-11-02 14:28 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-11-02 14:28 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-11-02 14:28 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-09-07 03:11 - 2013-09-07 03:11 - 00569856 _____ () C:\Users\Myriam\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll
2013-09-07 03:11 - 2013-09-07 03:11 - 01400846 _____ () C:\Users\Myriam\AppData\Local\Pokki\Engine\avcodec-54.dll
2013-09-07 03:11 - 2013-09-07 03:11 - 00151054 _____ () C:\Users\Myriam\AppData\Local\Pokki\Engine\avutil-51.dll
2013-09-07 03:11 - 2013-09-07 03:11 - 00222734 _____ () C:\Users\Myriam\AppData\Local\Pokki\Engine\avformat-54.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-11-04 16:38 - 2013-11-04 16:38 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2012-09-08 23:47 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-08 14:24 - 2013-10-09 01:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
2013-11-08 14:24 - 2013-10-09 01:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
2013-11-08 14:24 - 2013-10-09 01:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
2013-11-08 14:24 - 2013-10-09 01:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll
2013-11-08 14:24 - 2013-10-09 01:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
2013-11-11 15:15 - 2013-11-11 15:15 - 00087040 _____ () C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhdoalfjomgiohmljhhfdipjlbejaejm\2.0.3_0\chromeNPAPIYTG.dll
2013-11-08 14:24 - 2013-10-09 01:02 - 13584336 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Myriam\Lokale Einstellungen:vXuHh0i4tCNKTCbfuOAw
AlternateDataStreams: C:\Users\Myriam\Lokale Einstellungen:vyLVVkEUIDHKVKWXouPBcZcM
AlternateDataStreams: C:\Users\Myriam\AppData\Local:vXuHh0i4tCNKTCbfuOAw
AlternateDataStreams: C:\Users\Myriam\AppData\Local:vyLVVkEUIDHKVKWXouPBcZcM
AlternateDataStreams: C:\Users\Myriam\AppData\Local\Anwendungsdaten:vXuHh0i4tCNKTCbfuOAw
AlternateDataStreams: C:\Users\Myriam\AppData\Local\Anwendungsdaten:vyLVVkEUIDHKVKWXouPBcZcM
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/11/2013 09:15:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: tytghn.exe, Version: 1.0.0.9, Zeitstempel: 0x518ba1b3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x1828
Startzeit der fehlerhaften Anwendung: 0xtytghn.exe0
Pfad der fehlerhaften Anwendung: tytghn.exe1
Pfad des fehlerhaften Moduls: tytghn.exe2
Berichtskennung: tytghn.exe3
Vollständiger Name des fehlerhaften Pakets: tytghn.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: tytghn.exe5
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2421
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2421
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1140
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1140
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (11/11/2013 05:15:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: tytghn.exe, Version: 1.0.0.9, Zeitstempel: 0x518ba1b3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000daa3c
ID des fehlerhaften Prozesses: 0x6d4
Startzeit der fehlerhaften Anwendung: 0xtytghn.exe0
Pfad der fehlerhaften Anwendung: tytghn.exe1
Pfad des fehlerhaften Moduls: tytghn.exe2
Berichtskennung: tytghn.exe3
Vollständiger Name des fehlerhaften Pakets: tytghn.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: tytghn.exe5
Error: (11/11/2013 01:47:31 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (11/11/2013 01:41:43 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073418231
System errors:
=============
Error: (11/11/2013 03:30:57 PM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 4
Error: (11/11/2013 02:31:07 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: ASMedia Technology Inc - Other hardware, USB Controller - ASMedia XHCI Controller
Error: (11/11/2013 01:47:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (11/11/2013 01:46:42 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 10.11.2013 um 17:36:05 unerwartet heruntergefahren.
Error: (11/11/2013 01:46:24 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (11/10/2013 05:45:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: ASMedia Technology Inc - Other hardware, USB Controller - ASMedia XHCI Controller
Error: (11/10/2013 05:31:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: ASMedia Technology Inc - Other hardware, USB Controller - ASMedia XHCI Controller
Error: (11/10/2013 04:56:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (11/10/2013 04:55:25 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0xc000014d0
Error: (11/09/2013 03:01:39 PM) (Source: DCOM) (User: MAINPC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (11/11/2013 09:15:31 PM) (Source: Application Error)(User: )
Description: tytghn.exe1.0.0.9518ba1b3ntdll.dll6.2.9200.16578515fac6ec0000374000daa3c182801cedf1ab2b06bf2C:\ProgramData\youtubegizm\tytghn.exeC:\WINDOWS\SYSTEM32\ntdll.dll032c9670-4b0e-11e3-bf2b-3085a9a5d319
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2421
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2421
Error: (11/11/2013 05:41:13 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1140
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1140
Error: (11/11/2013 05:41:12 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (11/11/2013 05:15:31 PM) (Source: Application Error)(User: )
Description: tytghn.exe1.0.0.9518ba1b3ntdll.dll6.2.9200.16578515fac6ec0000374000daa3c6d401cedef92bb37a7cC:\ProgramData\youtubegizm\tytghn.exeC:\WINDOWS\SYSTEM32\ntdll.dll7c4e4148-4aec-11e3-bf2b-3085a9a5d319
Error: (11/11/2013 01:47:31 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (11/11/2013 01:41:43 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073418231
CodeIntegrity Errors:
===================================
Date: 2013-11-11 13:46:32.162
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-10 16:55:35.334
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-09 12:42:42.319
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-08 16:56:35.725
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-08 14:15:13.122
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-07 18:39:40.913
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-06 22:28:07.585
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-06 12:52:00.725
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-04 23:56:52.851
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-11-04 19:26:46.475
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\droidcam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 29%
Total physical RAM: 8145.64 MB
Available physical RAM: 5716.75 MB
Total Pagefile: 9361.64 MB
Available Pagefile: 5967.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.76 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:150 GB) (Free:44.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:765.55 GB) (Free:374.74 GB) NTFS
Drive e: (BUFFY_SEASON4_DISC1) (CDROM) (Total:6.76 GB) (Free:0 GB) UDF
Drive f: (Streunertomate) (Fixed) (Total:465.76 GB) (Free:27.15 GB) NTFS
Drive g: (YOLO) (Fixed) (Total:465.65 GB) (Free:156.56 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 589B9B70)
Partition: GPT Partition Type
========================================================
Disk: 2 (Size: 466 GB) (Disk ID: F0DFA825)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 466 GB) (Disk ID: AEA90291)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)
==================== End Of Log ============================
|
|
12.11.2013, 12:15
| #4 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen hi, Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.11.2013, 23:07
| #5 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Malware bites (hatte nichts gefunden :s) Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.15.08 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16736 Myriam :: MAINPC [Administrator] 15.11.13 21:42:45 mbam-log-2013-11-15 (21-42-45).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 213229 Laufzeit: 6 Minute(n), 26 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.012 - Bericht erstellt am 15/11/2013 um 21:51:30
# Updated 11/11/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Myriam - MAINPC
# Gestartet von : C:\Users\Myriam\Downloads\adwcleaner_3012.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\eSafe
Datei Gelöscht : C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\searchplugins\Web Search.xml
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ccncljhbalbbkkfgopogabimepmfkmff
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASMANCS
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKLM\Software\eSafeSecControl
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v25.0 (de)
[ Datei : C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=nt&installDate=02/11/2013");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14219408a53a4ae94784390bcf0cbac6");
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", true);
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "snapdosoftonicyb");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "2b8d50e5-9e66-b51b-49c0-89d9ed472ee2");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "02/11/2013");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "snapdosoftonicyb");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=2b8d50e5-9e66-b51b-49c0-89d9ed472ee2&searchtype=ds&installDate=02/11/2013&q=");
-\\ Google Chrome v30.0.1599.101
[ Datei : C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [9808 octets] - [30/10/2013 18:19:23]
AdwCleaner[R1].txt - [9809 octets] - [30/10/2013 18:19:49]
AdwCleaner[R2].txt - [1088 octets] - [01/11/2013 20:13:52]
AdwCleaner[R3].txt - [1148 octets] - [02/11/2013 13:43:49]
AdwCleaner[R4].txt - [7977 octets] - [15/11/2013 21:50:10]
AdwCleaner[S0].txt - [9707 octets] - [30/10/2013 18:20:28]
AdwCleaner[S1].txt - [6454 octets] - [15/11/2013 21:51:30]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6514 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8 x64
Ran by Myriam on 15.11.13 at 22:24:09,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?
Value Name Type Value Data
========================================================================================
Pokki REG_EXPAND_SZ C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
~~~ Registry Keys
~~~ Files
~~~ Folders
Failed to delete: [Folder] "C:\ProgramData\ytd video downloader"
Failed to delete: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"
~~~ FireFox
Emptied folder: C:\Users\Myriam\AppData\Roaming\mozilla\firefox\profiles\fxsd3ofq.default\minidumps [3 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.11.13 at 22:33:44,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013
Ran by Myriam (administrator) on MAINPC on 15-11-2013 23:06:17
Running from C:\Users\Myriam\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Ginyas Browser Companion Agent) C:\ProgramData\youtubegizm\tytghn.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374864 2012-07-25] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [213856 2012-10-08] (Trend Micro Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\WINDOWS\skipmetrosuite.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3050A J611 series (NET)] - C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Facebook Update] - C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-21] (Facebook Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-21] ()
HKCU\...\Run: [Google Update] - C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-16] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pokki] - C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Easy Update] - C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200 2012-05-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [78352 2012-05-23] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-04-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-11-04] (AVAST Software)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL [21864 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [20328 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Myriam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PodcastBHO Class - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ygBHO Class - {ed1e27f0-1bcd-42a4-ad62-7fc21e086e54} - C:\Program Files (x86)\youtubegizm\jsloader.dll (youtubegizmos.com)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default
FF Homepage: hxxp://www.google.lu/
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('.brightcove.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @Skype.com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @doubletwist.com/NPPodcast - C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll (doubleTwist Corporation)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Myriam\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Myriam\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: youtubegizmos - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\tb@youtubegizmos.com
FF Extension: client - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\client@anonymox.net.xpi
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: gadrm - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
FF Extension: Adblock Plus - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{21541D23-FDA1-4bf3-8AF2-8F623BF70B07}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR RestoreOnStartup: "https://www.google.lu/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.lu/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) - "suggest_url": "",
CHR Extension: (TrendMicro BEP Extension) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmiabdepfhhiieiipmeecdmeljggmfee\7.5.0.1115_1
CHR Extension: (AdBlock) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (ProxMate - Proxy on steroids!) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki\3.1.6_0
CHR Extension: (Lyrics for Youtube) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhdoalfjomgiohmljhhfdipjlbejaejm\2.0.3_0
CHR Extension: (Google Wallet) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-04] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-04-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-04-19] (BlueStack Systems, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143024 2012-10-10] (Stardock Software, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-11-14] (Wacom Technology, Corp.)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-11-04] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-11-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-11-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-04] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek )
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-04-19] (BlueStack Systems)
S3 DroidCam; C:\Windows\system32\drivers\droidcam.sys [25216 2013-02-27] (Dev47Apps)
R1 tmactmon; C:\Windows\system32\DRIVERS\tmactmon.sys [106000 2012-07-12] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-07-12] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.)
S3 tmeevw; C:\Windows\system32\DRIVERS\tmeevw.sys [98104 2012-08-25] (Trend Micro Inc.)
S0 tmel; C:\Windows\System32\DRIVERS\tmel.sys [34224 2012-07-27] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\system32\DRIVERS\tmevtmgr.sys [76672 2012-07-12] (Trend Micro Inc.)
R2 tmusa; C:\Windows\system32\DRIVERS\tmusa.sys [77112 2012-09-11] (Trend Micro Inc.)
S3 USBET; C:\Windows\system32\DRIVERS\ETdrv.sys [6408576 2010-11-10] (Etron)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-15 23:06 - 2013-11-15 23:06 - 01957794 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-15 23:06 - 2013-11-15 23:06 - 00030373 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-15 21:57 - 2013-11-05 23:36 - 01034531 _____ (Thisisu) C:\Users\Myriam\Desktop\JRT_NEW.exe
2013-11-15 21:52 - 2013-11-15 21:53 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:40 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-15 20:39 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-15 20:39 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-15 20:39 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2013-11-15 20:39 - 2013-09-14 02:15 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-11-15 20:39 - 2013-09-13 23:36 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:34 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:33 - 03279360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 01622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2013-11-15 20:39 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2013-11-15 20:39 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2013-11-15 20:39 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-15 20:39 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-15 20:39 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2013-11-15 20:39 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2013-11-15 20:39 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2013-11-15 20:39 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2013-11-15 20:39 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2013-11-15 20:39 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-15 20:38 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-11-15 20:37 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-11-15 20:37 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-15 20:26 - 2013-11-15 20:26 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-11 21:46 - 2013-11-11 21:47 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 16:09 - 2013-11-08 16:09 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 16:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-08 14:24 - 2013-11-15 22:34 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-08 14:24 - 2013-11-08 17:18 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-08 14:24 - 2013-11-08 14:29 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:23 - 2013-11-15 21:53 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-08 14:23 - 2013-11-08 14:29 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:38 - 2013-11-09 12:58 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-04 14:35 - 2013-11-04 16:36 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-02 16:54 - 2013-11-08 22:42 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-02 15:18 - 2012-07-26 06:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131102-151827.backup
2013-11-02 14:29 - 2013-11-02 14:29 - 00001386 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2013-11-02 14:28 - 2013-11-02 15:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:28 - 2013-11-02 14:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:37 - 2013-11-01 21:20 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 20:37 - 2013-11-01 21:09 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-04 19:26 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:19 - 2013-11-15 21:51 - 00000000 ____D C:\AdwCleaner
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 11:53 - 2013-11-08 14:17 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 13:31 - 2013-10-22 13:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-20 19:05 - 2013-11-15 23:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-10-20 19:05 - 2013-11-15 23:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-10-20 19:05 - 2013-11-15 22:47 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-10-20 19:05 - 2013-11-15 22:45 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-10-20 19:05 - 2013-11-15 22:03 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-10-20 19:05 - 2013-11-11 13:47 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-10-20 19:05 - 2013-10-26 19:15 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-20 19:05 - 2013-10-22 19:15 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-20 19:05 - 2013-10-20 19:05 - 00003964 _____ C:\WINDOWS\System32\Tasks\youtubegizm Runner
2013-10-20 19:05 - 2013-10-20 19:05 - 00003636 _____ C:\WINDOWS\System32\Tasks\youtubegizm Update Checker
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\ProgramData\youtubegizm
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\Program Files (x86)\youtubegizm
2013-10-17 11:40 - 2013-10-17 11:40 - 00031276 _____ C:\Users\Myriam\Documents\Bewertung - Formal korrektes Arbeiten.htm
==================== One Month Modified Files and Folders =======
2013-11-15 23:07 - 2013-11-15 23:06 - 00030373 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-15 23:06 - 2013-11-15 23:06 - 01957794 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-15 23:05 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-11-15 23:05 - 2013-10-20 19:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-11-15 23:04 - 2013-01-03 21:43 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Skype
2013-11-15 23:00 - 2013-06-29 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-15 22:54 - 2013-01-03 21:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\Sidebar7
2013-11-15 22:47 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-11-15 22:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-11-15 22:37 - 2013-03-04 13:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-15 22:34 - 2013-11-08 14:24 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-15 22:15 - 2013-08-11 23:03 - 00005066 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MAINPC-Myriam MainPC
2013-11-15 22:13 - 2013-09-30 21:59 - 01904801 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-15 22:03 - 2013-10-20 19:05 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-11-15 22:02 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-15 21:59 - 2013-01-21 18:54 - 00000946 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-15 21:59 - 2012-09-03 10:35 - 00761898 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-15 21:59 - 2012-09-03 10:35 - 00160028 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-15 21:59 - 2012-07-26 08:28 - 01772590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-15 21:53 - 2013-11-15 21:52 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 21:53 - 2013-11-08 14:23 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-15 21:53 - 2012-09-08 23:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-15 21:53 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-15 21:51 - 2013-10-30 18:19 - 00000000 ____D C:\AdwCleaner
2013-11-15 21:51 - 2013-01-03 19:26 - 00000000 ____D C:\Users\Myriam
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-15 21:26 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:49 - 2013-08-15 13:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-15 20:46 - 2013-01-04 22:06 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-15 20:41 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-15 20:30 - 2013-02-03 20:54 - 03183104 ___SH C:\Users\Myriam\Desktop\Thumbs.db
2013-11-15 20:26 - 2013-11-15 20:26 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-15 20:25 - 2013-03-14 19:37 - 00000000 ____D C:\Users\Myriam\AppData\Local\Pokki
2013-11-11 23:06 - 2013-01-22 02:04 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Dropbox
2013-11-11 23:03 - 2013-01-22 02:08 - 00000000 ___RD C:\Users\Myriam\Dropbox
2013-11-11 21:47 - 2013-11-11 21:46 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-11 13:47 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-11-11 13:37 - 2013-03-04 13:27 - 00000874 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-09 13:38 - 2013-04-03 13:02 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Mozilla
2013-11-09 12:58 - 2013-11-04 16:38 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-09 12:58 - 2013-01-03 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 22:42 - 2013-11-02 16:54 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-08 22:04 - 2013-01-06 00:05 - 00000000 ____D C:\Users\Myriam\Documents\MAGIX_MusicMaker16Premium_Download-Version
2013-11-08 18:59 - 2013-01-21 18:54 - 00000924 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-08 17:34 - 2013-01-03 22:28 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Media Player Classic
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 17:25 - 2013-05-12 14:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 17:18 - 2013-11-08 14:24 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-08 17:18 - 2013-01-03 19:28 - 00001445 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 16:22 - 2013-01-03 19:35 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3874095498-2534434736-829293843-1001
2013-11-08 16:09 - 2013-11-08 16:09 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 14:29 - 2013-11-08 14:24 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:29 - 2013-11-08 14:23 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-08 14:24 - 2013-01-03 19:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-08 14:23 - 2013-01-03 19:39 - 00000000 ____D C:\Users\Myriam\AppData\Local\Deployment
2013-11-08 14:17 - 2013-10-26 11:53 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-11-06 22:58 - 2013-01-03 22:19 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\vlc
2013-11-05 23:58 - 2013-01-10 19:11 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-05 23:58 - 2013-01-10 19:11 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-05 23:36 - 2013-11-15 21:57 - 01034531 _____ (Thisisu) C:\Users\Myriam\Desktop\JRT_NEW.exe
2013-11-04 19:26 - 2013-11-01 19:42 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-04 19:26 - 2013-01-04 03:49 - 00000000 ____D C:\ProgramData\MFAData
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:39 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 16:37 - 2013-01-15 22:13 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 16:36 - 2013-11-04 14:35 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\Users\Myriam\AppData\Local\PMB Files
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-02 17:18 - 2013-02-26 00:12 - 00005632 _____ C:\Users\Myriam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 15:12 - 2013-11-02 14:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:29 - 2013-11-02 14:29 - 00001386 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-11-02 14:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 20:37 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 21:20 - 2013-01-23 19:34 - 00000000 ____D C:\Users\Myriam\AppData\Local\Downloaded Installations
2013-11-01 21:20 - 2013-01-04 00:37 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Sony
2013-11-01 21:09 - 2013-11-01 20:37 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:47 - 2013-01-03 19:27 - 00000000 ____D C:\Users\Myriam\AppData\Local\VirtualStore
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:05 - 2013-07-18 00:11 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:49 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 19:35 - 2013-02-17 16:41 - 00000000 ____D C:\Users\Myriam\Desktop\WOHNUNG
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:20 - 2013-01-04 00:19 - 00000000 ____D C:\ProgramData\Uniblue
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 20:19 - 2013-01-03 19:28 - 00000000 ___RD C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-22 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-22 13:39 - 2013-10-22 13:31 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-20 19:05 - 2013-10-20 19:05 - 00003964 _____ C:\WINDOWS\System32\Tasks\youtubegizm Runner
2013-10-20 19:05 - 2013-10-20 19:05 - 00003636 _____ C:\WINDOWS\System32\Tasks\youtubegizm Update Checker
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\ProgramData\youtubegizm
2013-10-20 19:05 - 2013-10-20 19:05 - 00000000 ____D C:\Program Files (x86)\youtubegizm
2013-10-20 18:11 - 2013-01-03 21:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-17 11:40 - 2013-10-17 11:40 - 00031276 _____ C:\Users\Myriam\Documents\Bewertung - Formal korrektes Arbeiten.htm
2013-10-16 22:24 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache
Some content of TEMP:
====================
C:\Users\Myriam\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-08 16:22
==================== End Of Log ============================
--- --- --- --- --- --- |
|
16.11.2013, 15:58
| #6 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> ad.yieldmanager & ib.adnsx Pop Up Virus entfernen |
|
18.11.2013, 23:44
| #7 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen ESSET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=40ba670645228c4fb451c2d5cdb152e7
# engine=15928
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-18 08:17:40
# local_time=2013-11-18 09:17:40 (+0100, Mitteleuropäische Zeit)
# country="Luxembourg"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=774 16777213 71 77 1219863 1229963 0 0
# compatibility_mode=2047 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776574 100 94 1489166 12089335 0 0
# scanned=355536
# found=1
# cleaned=0
# scan_time=8791
sh=034BE991CB00B240F574CF8B7F0B1F407B1FD9B8 ft=1 fh=d540e00c2c6e80d8 vn="probably a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\_Setupx.dll.vir"
Code:
ATTFilter Results of screen317's Security Check version 0.99.76 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Trend Micro Titanium Internet Security Windows Defender avast! Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` MVPS Hosts File Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 25 Java version out of Date! Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Firefox (25.0) Google Chrome 30.0.1599.101 Google Chrome 31.0.1650.57 ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! AVAST Software Avast AvastSvc.exe AVAST Software Avast avastui.exe Trend Micro UniClient UiFrmWrk uiWatchDog.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log``````````````````````  Vielen Dank!!!  |
|
19.11.2013, 12:26
| #8 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Java updaten. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
19.11.2013, 17:50
| #9 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Heute PC angemacht und Pop Up ist wieder da und wie vorher :s Soll ich jetzt trotzdem das neue , was du mir jetzt als Anleitung gegeben hast, machen? :S |
|
20.11.2013, 10:26
| #10 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Nee. In welchem Browser? Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.11.2013, 22:51
| #11 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen In Chrome und firefox noch immer  FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013
Ran by Myriam (administrator) on MAINPC on 20-11-2013 22:49:59
Running from C:\Users\Myriam\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Ginyas Browser Companion Agent) C:\ProgramData\youtubegizm\tytghn.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
(Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374864 2012-07-25] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [213856 2012-10-08] (Trend Micro Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\WINDOWS\skipmetrosuite.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3050A J611 series (NET)] - C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Facebook Update] - C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-21] (Facebook Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-21] ()
HKCU\...\Run: [Google Update] - C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-16] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pokki] - C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin [829832 2013-10-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Easy Update] - C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200 2012-05-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\CyberLink\Shared files\brs.exe [78352 2012-05-23] (cyberlink)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-04-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-11-04] (AVAST Software)
AppInit_DLLs: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [20328 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Myriam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PodcastBHO Class - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ygBHO Class - {ed1e27f0-1bcd-42a4-ad62-7fc21e086e54} - C:\Program Files (x86)\youtubegizm\jsloader.dll (youtubegizmos.com)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default
FF Homepage: hxxp://www.google.lu/
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1%20%26%26%20url.indexOf('.png')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('.brightcove.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @Skype.com/Skype Web Plugin - C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @doubletwist.com/NPPodcast - C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll (doubleTwist Corporation)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Myriam\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Myriam\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Myriam\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Myriam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Myriam\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: youtubegizmos - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\tb@youtubegizmos.com
FF Extension: client - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\client@anonymox.net.xpi
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: gadrm - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
FF Extension: Adblock Plus - C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\fxsd3ofq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{21541D23-FDA1-4bf3-8AF2-8F623BF70B07}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR RestoreOnStartup: "https://www.google.lu/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.lu/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) - "suggest_url": "",
CHR Extension: (TrendMicro BEP Extension) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmiabdepfhhiieiipmeecdmeljggmfee\7.5.0.1115_1
CHR Extension: (AdBlock) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (ProxMate - Proxy on steroids!) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki\3.1.6_0
CHR Extension: (Lyrics for Youtube) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhdoalfjomgiohmljhhfdipjlbejaejm\2.0.3_0
CHR Extension: (Google Wallet) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-04] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-04-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-04-19] (BlueStack Systems, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143024 2012-10-10] (Stardock Software, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-11-14] (Wacom Technology, Corp.)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-11-04] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-11-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-11-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-04] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek )
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-04-19] (BlueStack Systems)
S3 DroidCam; C:\Windows\system32\drivers\droidcam.sys [25216 2013-02-27] (Dev47Apps)
R1 tmactmon; C:\Windows\system32\DRIVERS\tmactmon.sys [106000 2012-07-12] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-07-12] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.)
S3 tmeevw; C:\Windows\system32\DRIVERS\tmeevw.sys [98104 2012-08-25] (Trend Micro Inc.)
S0 tmel; C:\Windows\System32\DRIVERS\tmel.sys [34224 2012-07-27] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\system32\DRIVERS\tmevtmgr.sys [76672 2012-07-12] (Trend Micro Inc.)
R2 tmusa; C:\Windows\system32\DRIVERS\tmusa.sys [77112 2012-09-11] (Trend Micro Inc.)
S3 USBET; C:\Windows\system32\DRIVERS\ETdrv.sys [6408576 2010-11-10] (Etron)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-20 22:49 - 2013-11-20 22:49 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
2013-11-20 22:48 - 2013-11-20 22:48 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-19 20:27 - 2013-11-19 20:27 - 00353762 _____ C:\Users\Myriam\Desktop\BZdRvNwIYAADZ9s.png-large
2013-11-17 22:45 - 2013-11-17 22:45 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Unity
2013-11-17 22:41 - 2013-11-17 22:41 - 00000000 ____D C:\Users\Myriam\AppData\Local\Unity
2013-11-17 22:40 - 2013-11-17 22:40 - 01050512 _____ (Unity Technologies ApS) C:\Users\Myriam\Downloads\UnityWebPlayer.exe
2013-11-17 18:34 - 2013-11-17 18:35 - 00891184 _____ C:\Users\Myriam\Downloads\SecurityCheck.exe
2013-11-17 18:33 - 2013-11-17 18:34 - 02347384 _____ (ESET) C:\Users\Myriam\Downloads\esetsmartinstaller_enu.exe
2013-11-17 17:20 - 2013-11-17 17:21 - 677904384 _____ C:\Users\Myriam\Desktop\SANY0003.MP4
2013-11-17 17:19 - 2013-11-17 17:21 - 740229120 _____ C:\Users\Myriam\Desktop\SANY0004.MP4
2013-11-17 03:27 - 2013-08-11 18:20 - 1726955520 _____ C:\Users\Myriam\Desktop\Kung.Fu.Hustle.2004.German.AC3.HDRip.XviD-AJA.avi
2013-11-15 23:06 - 2013-11-20 22:49 - 00030702 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-15 21:52 - 2013-11-15 21:53 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:40 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-15 20:39 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-15 20:39 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-15 20:39 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2013-11-15 20:39 - 2013-09-14 02:15 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-11-15 20:39 - 2013-09-13 23:36 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:34 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:33 - 03279360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 01622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2013-11-15 20:39 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2013-11-15 20:39 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2013-11-15 20:39 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-15 20:39 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-15 20:39 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2013-11-15 20:39 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2013-11-15 20:39 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2013-11-15 20:39 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2013-11-15 20:39 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2013-11-15 20:39 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-15 20:38 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-11-15 20:37 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-11-15 20:37 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-15 20:26 - 2013-11-15 20:26 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-11 21:46 - 2013-11-11 21:47 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 16:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-08 14:24 - 2013-11-20 22:34 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-08 14:24 - 2013-11-16 12:38 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-08 14:24 - 2013-11-08 14:29 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:23 - 2013-11-20 20:38 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-08 14:23 - 2013-11-08 14:29 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:38 - 2013-11-09 12:58 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-04 14:35 - 2013-11-04 16:36 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-02 16:54 - 2013-11-08 22:42 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-02 15:18 - 2012-07-26 06:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131102-151827.backup
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2013-11-02 14:28 - 2013-11-02 15:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:28 - 2013-11-02 14:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:37 - 2013-11-01 21:20 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 20:37 - 2013-11-01 21:09 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-04 19:26 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:19 - 2013-11-15 21:51 - 00000000 ____D C:\AdwCleaner
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 11:53 - 2013-11-08 14:17 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 13:31 - 2013-10-22 13:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
==================== One Month Modified Files and Folders =======
2013-11-20 22:50 - 2013-11-15 23:06 - 00030702 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-20 22:49 - 2013-11-20 22:49 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
2013-11-20 22:48 - 2013-11-20 22:48 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-20 22:47 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-11-20 22:46 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-11-20 22:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-11-20 22:39 - 2013-01-03 21:43 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Skype
2013-11-20 22:38 - 2013-01-03 21:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\Sidebar7
2013-11-20 22:37 - 2013-03-04 13:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-20 22:34 - 2013-11-08 14:24 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-20 22:14 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\AppData\Local\WinZip
2013-11-20 22:05 - 2013-10-20 19:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-11-20 22:00 - 2013-06-29 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-20 21:59 - 2013-01-21 18:54 - 00000946 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-20 21:06 - 2013-02-03 20:54 - 03345920 ___SH C:\Users\Myriam\Desktop\Thumbs.db
2013-11-20 21:02 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-20 20:58 - 2013-09-30 21:59 - 01415687 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-20 20:49 - 2013-08-11 23:03 - 00005068 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MAINPC-Myriam MainPC
2013-11-20 20:38 - 2013-11-08 14:23 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-20 20:38 - 2013-10-20 19:05 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-11-20 20:36 - 2012-09-03 10:35 - 00761898 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-20 20:36 - 2012-09-03 10:35 - 00160028 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-20 20:36 - 2012-07-26 08:28 - 01772590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-20 20:29 - 2012-09-08 23:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-20 20:29 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-20 14:15 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-20 14:00 - 2013-03-14 19:37 - 00000000 ____D C:\Users\Myriam\AppData\Local\Pokki
2013-11-20 04:41 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-19 20:27 - 2013-11-19 20:27 - 00353762 _____ C:\Users\Myriam\Desktop\BZdRvNwIYAADZ9s.png-large
2013-11-19 18:59 - 2013-01-21 18:54 - 00000924 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-17 22:45 - 2013-11-17 22:45 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Unity
2013-11-17 22:41 - 2013-11-17 22:41 - 00000000 ____D C:\Users\Myriam\AppData\Local\Unity
2013-11-17 22:40 - 2013-11-17 22:40 - 01050512 _____ (Unity Technologies ApS) C:\Users\Myriam\Downloads\UnityWebPlayer.exe
2013-11-17 18:35 - 2013-11-17 18:34 - 00891184 _____ C:\Users\Myriam\Downloads\SecurityCheck.exe
2013-11-17 18:34 - 2013-11-17 18:33 - 02347384 _____ (ESET) C:\Users\Myriam\Downloads\esetsmartinstaller_enu.exe
2013-11-17 17:21 - 2013-11-17 17:20 - 677904384 _____ C:\Users\Myriam\Desktop\SANY0003.MP4
2013-11-17 17:21 - 2013-11-17 17:19 - 740229120 _____ C:\Users\Myriam\Desktop\SANY0004.MP4
2013-11-16 15:43 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache
2013-11-16 13:37 - 2013-03-04 13:27 - 00000874 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-16 12:38 - 2013-11-08 14:24 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-15 23:58 - 2013-01-06 00:05 - 00000000 ____D C:\Users\Myriam\Documents\MAGIX_MusicMaker16Premium_Download-Version
2013-11-15 21:53 - 2013-11-15 21:52 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 21:51 - 2013-10-30 18:19 - 00000000 ____D C:\AdwCleaner
2013-11-15 21:51 - 2013-01-03 19:26 - 00000000 ____D C:\Users\Myriam
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:49 - 2013-08-15 13:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-15 20:46 - 2013-01-04 22:06 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-15 20:26 - 2013-11-15 20:26 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-11 23:06 - 2013-01-22 02:04 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Dropbox
2013-11-11 23:03 - 2013-01-22 02:08 - 00000000 ___RD C:\Users\Myriam\Dropbox
2013-11-11 21:47 - 2013-11-11 21:46 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-11 13:47 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-11-09 13:38 - 2013-04-03 13:02 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Mozilla
2013-11-09 12:58 - 2013-11-04 16:38 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-09 12:58 - 2013-01-03 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-09 12:42 - 2013-11-09 12:42 - 00000334 _____ C:\WINDOWS\PFRO.log
2013-11-08 22:42 - 2013-11-02 16:54 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-08 17:34 - 2013-01-03 22:28 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Media Player Classic
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:25 - 2013-11-08 17:25 - 00001154 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-08 17:25 - 2013-11-08 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 17:25 - 2013-05-12 14:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 17:18 - 2013-01-03 19:28 - 00001445 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 16:22 - 2013-01-03 19:35 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3874095498-2534434736-829293843-1001
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 14:29 - 2013-11-08 14:24 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-08 14:29 - 2013-11-08 14:23 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-08 14:24 - 2013-01-03 19:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-08 14:23 - 2013-01-03 19:39 - 00000000 ____D C:\Users\Myriam\AppData\Local\Deployment
2013-11-08 14:17 - 2013-10-26 11:53 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-11-06 22:58 - 2013-01-03 22:19 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\vlc
2013-11-05 23:58 - 2013-01-10 19:11 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-05 23:58 - 2013-01-10 19:11 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 19:26 - 2013-11-01 19:42 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-04 19:26 - 2013-01-04 03:49 - 00000000 ____D C:\ProgramData\MFAData
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:39 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 16:37 - 2013-01-15 22:13 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 16:36 - 2013-11-04 14:35 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\Users\Myriam\AppData\Local\PMB Files
2013-11-03 13:31 - 2013-01-21 21:11 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-02 17:18 - 2013-02-26 00:12 - 00005632 _____ C:\Users\Myriam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 15:12 - 2013-11-02 14:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-11-02 14:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 20:37 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 21:20 - 2013-01-23 19:34 - 00000000 ____D C:\Users\Myriam\AppData\Local\Downloaded Installations
2013-11-01 21:20 - 2013-01-04 00:37 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Sony
2013-11-01 21:09 - 2013-11-01 20:37 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:47 - 2013-01-03 19:27 - 00000000 ____D C:\Users\Myriam\AppData\Local\VirtualStore
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:05 - 2013-07-18 00:11 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:49 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 19:35 - 2013-02-17 16:41 - 00000000 ____D C:\Users\Myriam\Desktop\WOHNUNG
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:20 - 2013-01-04 00:19 - 00000000 ____D C:\ProgramData\Uniblue
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 20:19 - 2013-01-03 19:28 - 00000000 ___RD C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-22 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-22 13:39 - 2013-10-22 13:31 - 00000000 ____D C:\Program Files (x86)\JDownloader
Some content of TEMP:
====================
C:\Users\Myriam\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-18 17:26
==================== End Of Log ============================
|
|
21.11.2013, 13:49
| #12 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Revo Uninstaller - Download - Filepony damit beide Browser deinstallieren, Reste entfernen lassen, neu installieren. Downloade Dir bitte AdwCleaner auf deinen Desktop.
frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.11.2013, 19:53
| #13 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen . . . . . Seit heute hat chrome ausserdem aufeinmal auch dieses Problem, dass mir bei Stichworten soetwas angezeigt wird. Hatte jetzt Wie angewiesen Chrome deinstalliert, doch es ist noch immer da! (in Firefox ist dieses problem nicht.)  adw log (hat wieder nichts gefunden ..) Code:
ATTFilter # AdwCleaner v3.012 - Bericht erstellt am 21/11/2013 um 19:57:07
# Updated 11/11/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Myriam - MAINPC
# Gestartet von : C:\Users\Myriam\Downloads\adwcleaner_3012.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Mozilla Firefox v25.0.1 (de)
[ Datei : C:\Users\Myriam\AppData\Roaming\Mozilla\Firefox\Profiles\26qc0a2a.default\prefs.js ]
-\\ Google Chrome v31.0.1650.57
[ Datei : C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [9808 octets] - [30/10/2013 18:19:23]
AdwCleaner[R1].txt - [9809 octets] - [30/10/2013 18:19:49]
AdwCleaner[R2].txt - [1088 octets] - [01/11/2013 20:13:52]
AdwCleaner[R3].txt - [1148 octets] - [02/11/2013 13:43:49]
AdwCleaner[R4].txt - [7977 octets] - [15/11/2013 21:50:10]
AdwCleaner[R5].txt - [1180 octets] - [21/11/2013 19:36:07]
AdwCleaner[R6].txt - [1129 octets] - [21/11/2013 19:57:07]
AdwCleaner[S0].txt - [9707 octets] - [30/10/2013 18:20:28]
AdwCleaner[S1].txt - [6646 octets] - [15/11/2013 21:51:30]
AdwCleaner[S2].txt - [1254 octets] - [21/11/2013 19:42:49]
########## EOF - C:\AdwCleaner\AdwCleaner[R6].txt - [1369 octets] ##########
FRT FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013
Ran by Myriam (administrator) on MAINPC on 21-11-2013 19:46:39
Running from C:\Users\Myriam\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Ginyas Browser Companion Agent) C:\ProgramData\youtubegizm\tytghn.exe
(Ginyas Browser Companion Agent) C:\ProgramData\youtubegizm\tytghn.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Pokki) C:\Users\Myriam\AppData\Local\Pokki\Engine\pokki.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Microsoft Corporation) C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16683_none_62280e15510f8e79\TiWorker.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MsoSync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
(Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374864 2012-07-25] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [213856 2012-10-08] (Trend Micro Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\WINDOWS\skipmetrosuite.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3050A J611 series (NET)] - C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Facebook Update] - C:\Users\Myriam\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-21] (Facebook Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Myriam\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-16] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20580000 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pokki] - C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Easy Update] - C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200 2012-05-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [336992 2012-12-09] (Power Software Ltd)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-04-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-11-04] (AVAST Software)
AppInit_DLLs: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [20328 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Myriam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: PodcastBHO Class - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ygBHO Class - {ed1e27f0-1bcd-42a4-ad62-7fc21e086e54} - C:\Program Files (x86)\youtubegizm\jsloader.dll (youtubegizmos.com)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.5.1115\7.5.1115\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20013\1.0.1194\1.0.1194\TmopIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR DefaultSearchURL: (Google) - hxxp://www.google.lu/search?q={searchTerms}
CHR DefaultSuggestURL: (Google) - "suggest_url": "",
CHR Extension: (Google Docs) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (TrendMicro BEP Extension) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmiabdepfhhiieiipmeecdmeljggmfee\7.5.0.1115_0
CHR Extension: (Google Search) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (avast! Online Security) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (Lyrics for Youtube) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhdoalfjomgiohmljhhfdipjlbejaejm\2.0.3_0
CHR Extension: (Google Wallet) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Myriam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1115\7.5.1115\chrome_tmbep.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Whitelisted) =================
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-04] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-04-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-04-19] (BlueStack Systems, Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143024 2012-10-10] (Stardock Software, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-11-14] (Wacom Technology, Corp.)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-11-04] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-11-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-11-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-04] ()
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek )
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-04-19] (BlueStack Systems)
S3 DroidCam; C:\Windows\system32\drivers\droidcam.sys [25216 2013-02-27] (Dev47Apps)
R1 tmactmon; C:\Windows\system32\DRIVERS\tmactmon.sys [106000 2012-07-12] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-07-12] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.)
S3 tmeevw; C:\Windows\system32\DRIVERS\tmeevw.sys [98104 2012-08-25] (Trend Micro Inc.)
S0 tmel; C:\Windows\System32\DRIVERS\tmel.sys [34224 2012-07-27] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\system32\DRIVERS\tmevtmgr.sys [76672 2012-07-12] (Trend Micro Inc.)
R2 tmusa; C:\Windows\system32\DRIVERS\tmusa.sys [77112 2012-09-11] (Trend Micro Inc.)
S3 USBET; C:\Windows\system32\DRIVERS\ETdrv.sys [6408576 2010-11-10] (Etron)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-21 19:38 - 2013-11-21 19:38 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-21 19:35 - 2013-11-21 19:46 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-21 19:35 - 2013-11-21 19:45 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-21 19:35 - 2013-11-21 19:40 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-21 19:35 - 2013-11-21 19:40 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-21 19:08 - 2013-11-21 19:08 - 00283184 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.1.exe
2013-11-21 19:07 - 2013-11-21 19:07 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Myriam\Downloads\revosetup95.exe
2013-11-21 19:07 - 2013-11-21 19:07 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-11-20 22:49 - 2013-11-20 22:49 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
2013-11-20 22:48 - 2013-11-20 22:48 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-17 22:45 - 2013-11-17 22:45 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Unity
2013-11-17 22:41 - 2013-11-17 22:41 - 00000000 ____D C:\Users\Myriam\AppData\Local\Unity
2013-11-17 18:34 - 2013-11-17 18:35 - 00891184 _____ C:\Users\Myriam\Downloads\SecurityCheck.exe
2013-11-17 18:33 - 2013-11-17 18:34 - 02347384 _____ (ESET) C:\Users\Myriam\Downloads\esetsmartinstaller_enu.exe
2013-11-17 17:20 - 2013-11-17 17:21 - 677904384 _____ C:\Users\Myriam\Desktop\SANY0003.MP4
2013-11-17 17:19 - 2013-11-17 17:21 - 740229120 _____ C:\Users\Myriam\Desktop\SANY0004.MP4
2013-11-17 03:27 - 2013-08-11 18:20 - 1726955520 _____ C:\Users\Myriam\Desktop\Kung.Fu.Hustle.2004.German.AC3.HDRip.XviD-AJA.avi
2013-11-15 23:06 - 2013-11-21 19:46 - 00020219 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-15 21:52 - 2013-11-15 21:53 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:40 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-15 20:39 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-15 20:39 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-15 20:39 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2013-11-15 20:39 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2013-11-15 20:39 - 2013-09-14 02:15 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-11-15 20:39 - 2013-09-13 23:36 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2013-11-15 20:39 - 2013-09-13 23:36 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:34 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2013-11-15 20:39 - 2013-09-13 23:33 - 03279360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 01622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2013-11-15 20:39 - 2013-09-13 23:33 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2013-11-15 20:39 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2013-11-15 20:39 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2013-11-15 20:39 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-11-15 20:39 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-15 20:39 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-15 20:39 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2013-11-15 20:39 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2013-11-15 20:39 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2013-11-15 20:39 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2013-11-15 20:39 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-11-15 20:39 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2013-11-15 20:39 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-15 20:38 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-15 20:38 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-11-15 20:38 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-15 20:38 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-11-15 20:38 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-11-15 20:37 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-11-15 20:37 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-15 20:26 - 2013-11-21 19:46 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-11 21:46 - 2013-11-11 21:47 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-09 12:42 - 2013-11-21 19:43 - 00001856 _____ C:\WINDOWS\PFRO.log
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-08 16:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:38 - 2013-11-09 12:58 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-04 14:35 - 2013-11-04 16:36 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-02 16:54 - 2013-11-08 22:42 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-02 15:18 - 2012-07-26 06:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131102-151827.backup
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2013-11-02 14:28 - 2013-11-02 15:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:28 - 2013-11-02 14:29 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:37 - 2013-11-01 21:20 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 20:37 - 2013-11-01 21:09 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-04 19:26 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:19 - 2013-11-21 19:42 - 00000000 ____D C:\AdwCleaner
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 11:53 - 2013-11-21 19:46 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 13:31 - 2013-10-22 13:39 - 00000000 ____D C:\Program Files (x86)\JDownloader
==================== One Month Modified Files and Folders =======
2013-11-21 19:47 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Stats Report.job
2013-11-21 19:47 - 2013-02-03 20:54 - 03367424 ___SH C:\Users\Myriam\Desktop\Thumbs.db
2013-11-21 19:46 - 2013-11-21 19:35 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-21 19:46 - 2013-11-15 23:06 - 00020219 _____ C:\Users\Myriam\Downloads\FRST.txt
2013-11-21 19:46 - 2013-11-15 20:26 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-21 19:46 - 2013-10-26 11:53 - 00002099 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2013-11-21 19:46 - 2013-01-03 21:43 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Skype
2013-11-21 19:45 - 2013-11-21 19:35 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-21 19:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm FireFox Watcher.job
2013-11-21 19:45 - 2013-10-20 19:05 - 00001076 _____ C:\WINDOWS\Tasks\youtubegizm Chrome Watcher.job
2013-11-21 19:44 - 2013-10-20 19:05 - 00001028 _____ C:\WINDOWS\Tasks\youtubegizm Runner.job
2013-11-21 19:44 - 2013-10-20 19:05 - 00000960 _____ C:\WINDOWS\Tasks\youtubegizm Update Checker.job
2013-11-21 19:44 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-21 19:43 - 2013-11-09 12:42 - 00001856 _____ C:\WINDOWS\PFRO.log
2013-11-21 19:43 - 2013-09-30 21:59 - 01542843 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-21 19:43 - 2012-09-08 23:53 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-21 19:43 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-21 19:42 - 2013-10-30 18:19 - 00000000 ____D C:\AdwCleaner
2013-11-21 19:40 - 2013-11-21 19:35 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-21 19:40 - 2013-11-21 19:35 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-21 19:38 - 2013-11-21 19:38 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-21 19:38 - 2013-01-03 19:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-21 19:37 - 2013-03-04 13:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-21 19:35 - 2013-01-03 19:39 - 00000000 ____D C:\Users\Myriam\AppData\Local\Deployment
2013-11-21 19:34 - 2013-01-04 14:59 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2013-11-21 19:34 - 2013-01-03 21:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\Sidebar7
2013-11-21 19:32 - 2013-01-21 21:11 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-11-21 19:31 - 2012-09-03 11:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-21 19:28 - 2012-09-03 11:44 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-11-21 19:27 - 2013-04-03 13:02 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Mozilla
2013-11-21 19:08 - 2013-11-21 19:08 - 00283184 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.1.exe
2013-11-21 19:07 - 2013-11-21 19:07 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Myriam\Downloads\revosetup95.exe
2013-11-21 19:07 - 2013-11-21 19:07 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-11-21 19:00 - 2013-06-29 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-21 19:00 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-21 18:59 - 2013-01-21 18:54 - 00000946 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001UA.job
2013-11-21 18:59 - 2013-01-21 18:54 - 00000924 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-21 18:48 - 2012-09-03 10:35 - 00761898 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-21 18:48 - 2012-09-03 10:35 - 00160028 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-21 18:48 - 2012-07-26 08:28 - 01772590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-21 12:01 - 2013-01-22 02:04 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Dropbox
2013-11-21 11:53 - 2013-01-22 02:08 - 00000000 ___RD C:\Users\Myriam\Dropbox
2013-11-21 11:20 - 2013-08-11 23:03 - 00005068 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MAINPC-Myriam MainPC
2013-11-21 11:08 - 2013-03-14 19:37 - 00000000 ____D C:\Users\Myriam\AppData\Local\Pokki
2013-11-20 23:58 - 2013-03-24 13:22 - 00000000 ____D C:\Users\Myriam\Documents\SAE STUFF
2013-11-20 22:49 - 2013-11-20 22:49 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64 (1).exe
2013-11-20 22:48 - 2013-11-20 22:48 - 01957964 _____ (Farbar) C:\Users\Myriam\Downloads\FRST64.exe
2013-11-20 22:14 - 2013-10-14 13:16 - 00000000 ____D C:\Users\Myriam\AppData\Local\WinZip
2013-11-20 14:15 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-17 22:45 - 2013-11-17 22:45 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Unity
2013-11-17 22:41 - 2013-11-17 22:41 - 00000000 ____D C:\Users\Myriam\AppData\Local\Unity
2013-11-17 18:35 - 2013-11-17 18:34 - 00891184 _____ C:\Users\Myriam\Downloads\SecurityCheck.exe
2013-11-17 18:34 - 2013-11-17 18:33 - 02347384 _____ (ESET) C:\Users\Myriam\Downloads\esetsmartinstaller_enu.exe
2013-11-17 17:21 - 2013-11-17 17:20 - 677904384 _____ C:\Users\Myriam\Desktop\SANY0003.MP4
2013-11-17 17:21 - 2013-11-17 17:19 - 740229120 _____ C:\Users\Myriam\Desktop\SANY0004.MP4
2013-11-16 15:43 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache
2013-11-16 13:37 - 2013-03-04 13:27 - 00000874 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3874095498-2534434736-829293843-1001Core.job
2013-11-15 23:58 - 2013-01-06 00:05 - 00000000 ____D C:\Users\Myriam\Documents\MAGIX_MusicMaker16Premium_Download-Version
2013-11-15 21:53 - 2013-11-15 21:52 - 05604576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-15 21:51 - 2013-01-03 19:26 - 00000000 ____D C:\Users\Myriam
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-11-15 21:26 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-15 20:50 - 2013-11-15 20:50 - 00000000 ____D C:\Program Files\ASUS
2013-11-15 20:49 - 2013-08-15 13:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-15 20:46 - 2013-01-04 22:06 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-15 20:33 - 2013-11-15 20:33 - 01085542 _____ C:\Users\Myriam\Downloads\adwcleaner_3012.exe
2013-11-11 21:47 - 2013-11-11 21:46 - 00038841 _____ C:\Users\Myriam\Downloads\Addition.txt
2013-11-11 21:44 - 2013-11-11 21:44 - 00000000 ____D C:\FRST
2013-11-11 13:47 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Stats Report
2013-11-09 12:58 - 2013-11-04 16:38 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-09 12:58 - 2013-01-03 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-08 22:42 - 2013-11-02 16:54 - 00000669 _____ C:\Users\Myriam\Desktop\Dokument.txt
2013-11-08 17:34 - 2013-01-03 22:28 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Media Player Classic
2013-11-08 17:25 - 2013-11-08 17:25 - 00283104 _____ (Mozilla) C:\Users\Myriam\Downloads\Firefox Setup Stub 25.0.exe
2013-11-08 17:18 - 2013-01-03 19:28 - 00001445 _____ C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 16:22 - 2013-01-03 19:35 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3874095498-2534434736-829293843-1001
2013-11-08 16:09 - 2013-11-08 16:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-06 22:58 - 2013-01-03 22:19 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\vlc
2013-11-05 23:58 - 2013-01-10 19:11 - 00694232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-05 23:58 - 2013-01-10 19:11 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 19:26 - 2013-11-01 19:42 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-04 19:26 - 2013-01-04 03:49 - 00000000 ____D C:\ProgramData\MFAData
2013-11-04 16:39 - 2013-11-04 16:39 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVAST Software
2013-11-04 16:39 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-11-04 16:38 - 2013-11-04 16:38 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 16:38 - 2013-11-04 16:38 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 16:38 - 2013-11-04 16:38 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 16:38 - 2013-11-04 16:38 - 00001973 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 16:37 - 2013-01-15 22:13 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 16:36 - 2013-11-04 14:35 - 00000000 ____D C:\WINDOWS\CD09642E061D4844BA37ED1480916404.TMP
2013-11-04 14:36 - 2013-11-04 14:36 - 00003326 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-04 14:36 - 2013-11-04 14:36 - 00000000 _____ C:\autoexec.bat
2013-11-02 17:18 - 2013-02-26 00:12 - 00005632 _____ C:\Users\Myriam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 15:12 - 2013-11-02 14:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-02 14:29 - 2013-11-02 14:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2013-11-02 14:29 - 2013-11-02 14:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-11-01 21:20 - 2013-11-01 21:20 - 00003704 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2013-11-01 21:20 - 2013-11-01 21:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 21:20 - 00003664 _____ C:\WINDOWS\System32\Tasks\ASUS-Online-Aktualisierungsprogramm
2013-11-01 21:20 - 2013-11-01 20:37 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-11-01 21:20 - 2013-01-23 19:34 - 00000000 ____D C:\Users\Myriam\AppData\Local\Downloaded Installations
2013-11-01 21:20 - 2013-01-04 00:37 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Sony
2013-11-01 21:09 - 2013-11-01 20:37 - 00000000 ____D C:\ProgramData\AVG
2013-11-01 20:47 - 2013-01-03 19:27 - 00000000 ____D C:\Users\Myriam\AppData\Local\VirtualStore
2013-11-01 20:38 - 2013-11-01 20:38 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\AVG
2013-11-01 20:05 - 2013-07-18 00:11 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-11-01 20:04 - 2013-11-01 20:04 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 20:03 - 2013-11-01 20:03 - 01033335 _____ (Thisisu) C:\Users\Myriam\Downloads\JRT_6.0.7.exe
2013-11-01 19:49 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-01 19:45 - 2013-11-01 19:45 - 00001169 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-11-01 19:45 - 2013-11-01 19:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-11-01 19:42 - 2013-11-01 19:42 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\TuneUp Software
2013-11-01 19:35 - 2013-11-01 19:35 - 00000000 ____D C:\Users\Myriam\AppData\Local\MFAData
2013-11-01 19:35 - 2013-02-17 16:41 - 00000000 ____D C:\Users\Myriam\Desktop\WOHNUNG
2013-11-01 17:17 - 2013-11-01 17:17 - 00000000 ____D C:\Users\Myriam\Downloads\backups
2013-11-01 17:15 - 2013-11-01 17:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\Myriam\Downloads\HiJackThis204.exe
2013-10-31 15:27 - 2013-10-31 15:27 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\dvdcss
2013-10-31 14:24 - 2013-10-31 14:24 - 00000000 ____D C:\Users\Myriam\AppData\Roaming\Malwarebytes
2013-10-31 14:23 - 2013-10-31 14:23 - 00000731 _____ C:\Users\Myriam\Documents\attack on titan dub.txt
2013-10-31 14:23 - 2013-10-31 14:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-30 18:20 - 2013-01-04 00:19 - 00000000 ____D C:\ProgramData\Uniblue
2013-10-28 22:08 - 2013-10-28 22:08 - 09311267 _____ C:\Users\Myriam\Desktop\Unbenannt.psd
2013-10-26 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm FireFox Watcher
2013-10-22 20:19 - 2013-10-22 20:19 - 00000094 _____ C:\Users\Myriam\AppData\Local\fusioncache.dat
2013-10-22 20:19 - 2013-01-03 19:28 - 00000000 ___RD C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-22 19:15 - 2013-10-20 19:05 - 00004412 _____ C:\WINDOWS\System32\Tasks\youtubegizm Chrome Watcher
2013-10-22 13:39 - 2013-10-22 13:31 - 00000000 ____D C:\Program Files (x86)\JDownloader
Some content of TEMP:
====================
C:\Users\Myriam\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-18 17:26
==================== End Of Log ============================
Geändert von Myriam McFly (21.11.2013 um 20:12 Uhr) |
|
22.11.2013, 16:16
| #14 |
| /// the machine /// TB-Ausbilder | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen nachdem Du Chrome mit Revo deinstalliert hast? Verbindest du mit einem Google Konto?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.11.2013, 19:55
| #15 |
| | ad.yieldmanager & ib.adnsx Pop Up Virus entfernen Ja das tu ich. hxxp://intext.nav-links.com/ heisst übrigens diese Seite vom SCreenshot. :/ Geändert von Myriam McFly (22.11.2013 um 20:01 Uhr) |
|
| Themen zu ad.yieldmanager & ib.adnsx Pop Up Virus entfernen |
| ad.yieldmanager, avast, ccleaner, eingefangen, entfernen, gepostet, google, grenzen, hijack, hijackthis, ib.adnsx, jahre, leute, lösung, malware, nichts, pop up, pop up virus, pop-up virus, problem, programm, seite, seiten, seltsame, snap.do, spybot, suchmaschine, tool, trojaner, virus |
Hybrid-Darstellung
