![]() |
|
Plagegeister aller Art und deren Bekämpfung: Mail delivery failed: returning message to senderWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #9 |
![]() ![]() | ![]() Mail delivery failed: returning message to senderCode:
ATTFilter ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6889 # api_version=3.0.2 # EOSSerial=708fbf66879d8e4bba127ab2e84702c7 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-01-25 08:02:39 # local_time=2013-01-25 09:02:39 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 100 94 6941885 135854031 0 0 # compatibility_mode=5893 16776573 100 94 36420 110775350 0 0 # scanned=345382 # found=0 # cleaned=0 # scan_time=10745 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=708fbf66879d8e4bba127ab2e84702c7 # engine=13175 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-02-17 01:04:31 # local_time=2013-02-17 02:04:31 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 100 94 8903997 137816143 0 0 # compatibility_mode=5893 16776573 100 94 15916 112737462 0 0 # scanned=336584 # found=0 # cleaned=0 # scan_time=8185 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=708fbf66879d8e4bba127ab2e84702c7 # engine=13403 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-03-16 03:51:44 # local_time=2013-03-16 04:51:44 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 100 94 11246830 140158976 0 0 # compatibility_mode=5893 16776573 100 94 24008 115080295 0 0 # scanned=352245 # found=0 # cleaned=0 # scan_time=11522 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=708fbf66879d8e4bba127ab2e84702c7 # engine=15943 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-19 11:09:20 # local_time=2013-11-20 12:09:20 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 111984 136533751 0 0 # scanned=295057 # found=0 # cleaned=0 # scan_time=29676 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=708fbf66879d8e4bba127ab2e84702c7 # engine=15952 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-20 10:58:27 # local_time=2013-11-20 11:58:27 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 13365 136576298 0 0 # scanned=243388 # found=0 # cleaned=0 # scan_time=9213 Code:
ATTFilter Results of screen317's Security Check version 0.99.76 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Secunia PSI (3.0.0.7009) Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 45 Adobe Flash Player 11.9.900.152 Mozilla Firefox (25.0.1) Google Chrome 21.0.1180.89 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013 Ran by Flavia (administrator) on FLAVIA-PC on 20-11-2013 12:10:01 Running from C:\Users\Flavia\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: English(US) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Secunia) C:\Program Files\Secunia\PSI\PSIA.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Portrait Displays, Inc) C:\Program Files\Portrait Displays\forteManager\DTHtml.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Akamai Technologies, Inc.) C:\Users\Flavia\AppData\Local\Akamai\netsession_win.exe (Portrait Displays Inc.) C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe (Gainward Co. Ltd.) C:\Program Files\EXPERTool\TBPanel.exe (Akamai Technologies, Inc.) C:\Users\Flavia\AppData\Local\Akamai\netsession_win.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Spotify Ltd) C:\Users\Flavia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Secunia) C:\Program Files\Secunia\PSI\psi_tray.exe () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation) HKLM\...\Run: [DT LGE] - C:\Program Files\Common Files\Portrait Displays\Shared\DT_Startup.exe [81920 2007-10-11] () HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10082920 2011-06-09] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [Aeria Ignite] - C:\Program Files\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment) HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-10-19] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Flavia\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-22] () HKCU\...\Run: [TBPanel] - C:\Program Files\EXPERTool\TBPanel.exe [2048368 2012-10-11] (Gainward Co. Ltd.) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Flavia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-13] (Spotify Ltd) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKCU\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-06-21] (NEXON Inc.) ==================== Internet (Whitelisted) ==================== ProxyServer: http=localhost:8118;https=localhost:8118;ftp=localhost:8118;socks=localhost:9050 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6961A5218BCDCD01 URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} SearchScopes: HKLM - DefaultScope value is missing. BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll () BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - No Name - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - No File Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab DPF: {60F33B36-3E89-48EF-BE77-ACC23A366C2A} https://wstatic.plaync.co.kr/common/UniUpdate/NCLoader.8.cab DPF: {640044E9-92A3-4B89-A615-1F65354D3A65} hxxp://rfonline-full.gscdn.com/gscdn/ccr_downloader.cab DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} hxxp://www.navigram.com/engine/v911/Navigram.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab DPF: {924B4927-D3BA-41EA-9F7E-8A89194AB3AC} hxxp://panda-plugin.disney.go.com/plugin/win32/p3dactivex.cab DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll () Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Flavia\AppData\Roaming\Mozilla\Firefox\Profiles\ppf858wc.default FF NewTab: about:blank FF Homepage: www.google.de FF NetworkProxy: "no_proxies_on", "" FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nppl3260;version=6.0.12.732 - c:\program files\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin: @real.com/nprjplug;version=1.0.3.732 - c:\program files\real\realplayer\Netscape6\nprjplug.dll No File FF Plugin: @real.com/nprphtml5videoshim;version=1.0.0.0 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.732 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll No File FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.) FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Flavia\AppData\Roaming\Kalydo\KalydoPlayer\bin1\npkalydo.dll (Eximion B.V.) FF Plugin HKCU: @soe.sony.com/installer,version=1.0.3 - C:\Users\Flavia\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\npsoe.dll () FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Flavia\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\Flavia\AppData\Roaming\Mozilla\Firefox\Profiles\ppf858wc.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKCU\...\Firefox\Extensions: [{282BBB71-6301-4E39-9F74-00210BB4E0B3}] - C:\Users\Flavia\AppData\Local\{282BBB71-6301-4E39-9F74-00210BB4E0B3} FF Extension: XULRunner - C:\Users\Flavia\AppData\Local\{282BBB71-6301-4E39-9F74-00210BB4E0B3} Chrome: ======= CHR Extension: (YouTube) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (avast! WebRep) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0 CHR Extension: (Plus-HD-2.5) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.25.80_0 CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.1_0 CHR Extension: (Gmail) - C:\Users\Flavia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx ========================== Services (Whitelisted) ================= R2 Akamai; c:\program files\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 DTSRVC; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [65536 2007-10-11] () R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [116224 2012-02-09] () R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) S3 npggsvc; C:\Windows\system32\GameMon.des [4573608 2013-05-13] (INCA Internet Co., Ltd.) S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2012-06-21] (Overwolf Ltd) R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia) S2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [659992 2013-04-18] (Secunia) S3 xsherlock; C:\Windows\system32\xsherlock.xem [670816 2012-07-01] (Wellbia.com Co., Ltd.) ==================== Drivers (Whitelisted) ==================== S3 1394hub; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH) S3 apf003; C:\Windows\system32\apf003.sys [13232 2012-03-16] () R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [15656 2011-05-10] (Windows (R) Win 7 DDK provider) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] () R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21952 2012-02-09] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21952 2012-02-09] () R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [40936 2013-01-18] () R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation) R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [734208 2009-05-25] (Ralink Technology Corp.) R3 PdiPorts; C:\Windows\System32\Drivers\PdiPorts.sys [15920 2006-11-16] (Portrait Displays, Inc.) S3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-04-18] (Secunia) S3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3328472 2011-07-28] (Windows (R) Win 7 DDK provider) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2013-06-17] (Duplex Secure Ltd.) S3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv.sys [13824 2012-07-28] (Scott) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [31680 2013-11-20] () R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.) U3 av69ohxr; C:\Windows\System32\Drivers\av69ohxr.sys [0 ] (Microsoft Corporation) S2 adfs; No ImagePath S3 catchme; \??\C:\Users\Flavia\AppData\Local\Temp\catchme.sys [x] S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x] S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x] S3 StarOpen; No ImagePath S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 taphss; system32\DRIVERS\taphss.sys [x] S3 taphss6; system32\DRIVERS\taphss6.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 vtany; \??\C:\Windows\vtany.sys [x] S3 XDva288; \??\C:\Windows\system32\XDva288.sys [x] S3 XDva306; \??\C:\Windows\system32\XDva306.sys [x] S3 XDva327; \??\C:\Windows\system32\XDva327.sys [x] S3 XDva332; \??\C:\Windows\system32\XDva332.sys [x] S3 XDva341; \??\C:\Windows\system32\XDva341.sys [x] S3 XDva344; \??\C:\Windows\system32\XDva344.sys [x] S3 XDva349; \??\C:\Windows\system32\XDva349.sys [x] S3 XDva356; \??\C:\Windows\system32\XDva356.sys [x] S3 XDva375; \??\C:\Windows\system32\XDva375.sys [x] S3 XDva380; \??\C:\Windows\system32\XDva380.sys [x] S3 XDva387; \??\C:\Windows\system32\XDva387.sys [x] S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-20 12:04 - 2013-11-20 12:04 - 00891184 _____ C:\Users\Flavia\Desktop\SecurityCheck.exe 2013-11-20 10:11 - 2013-11-20 10:11 - 00348187 _____ C:\Users\Flavia\Downloads\Enemy Lines.epub 2013-11-20 09:03 - 2013-11-20 09:03 - 00086976 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-11-19 15:52 - 2013-11-19 15:52 - 02347384 _____ (ESET) C:\Users\Flavia\Desktop\esetsmartinstaller_enu.exe 2013-11-18 16:44 - 2013-11-18 16:44 - 00001723 _____ C:\Users\Flavia\Desktop\JRT.txt 2013-11-18 16:40 - 2013-11-18 16:40 - 01034531 _____ (Thisisu) C:\Users\Flavia\Desktop\JRT.exe 2013-11-18 16:26 - 2013-11-18 16:35 - 00000000 ____D C:\AdwCleaner 2013-11-18 16:25 - 2013-11-18 16:26 - 01085542 _____ C:\Users\Flavia\Desktop\adwcleaner.exe 2013-11-18 15:53 - 2013-11-18 15:53 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-18 15:53 - 2013-11-18 15:53 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-18 15:53 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-18 15:52 - 2013-11-18 15:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Flavia\Desktop\mbam-setup-1.75.0.1300.exe 2013-11-17 13:31 - 2013-11-17 13:31 - 00066460 _____ C:\ComboFix.txt 2013-11-17 13:04 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-17 13:04 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-17 13:04 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-17 13:04 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-17 13:04 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-17 13:04 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-17 13:04 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-17 13:04 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-17 13:03 - 2013-11-17 13:31 - 00000000 ____D C:\Qoobox 2013-11-17 13:02 - 2013-11-17 13:02 - 05146587 ____R (Swearware) C:\Users\Flavia\Desktop\ComboFix.exe 2013-11-16 16:16 - 2013-11-20 12:10 - 00022197 _____ C:\Users\Flavia\Desktop\FRST.txt 2013-11-16 16:16 - 2013-11-16 16:16 - 01090529 _____ (Farbar) C:\Users\Flavia\Desktop\FRST.exe 2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\FRST 2013-11-16 09:55 - 2013-11-18 16:31 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-13 16:05 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-11-13 16:05 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-11-13 16:05 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-11-13 16:04 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-11-13 16:04 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-11-13 16:04 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-11-13 16:04 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-13 16:04 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2013-11-13 16:04 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-11-13 16:04 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-11-13 16:04 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-13 16:04 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-13 15:58 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2013-11-13 09:45 - 2013-11-13 09:49 - 00012176 _____ C:\Windows\IE11_main.log 2013-11-13 09:45 - 2013-11-13 09:45 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-13 09:45 - 2013-11-13 09:45 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-13 09:45 - 2013-11-13 09:45 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-13 09:45 - 2013-11-13 09:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-13 09:45 - 2013-11-13 09:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-13 09:45 - 2013-11-13 09:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-13 09:40 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 09:39 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 09:39 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 09:39 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 09:39 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-13 09:39 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-13 09:39 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-13 09:39 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 09:39 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 09:39 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 09:39 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 09:39 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 09:39 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 09:39 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 09:39 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 09:39 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 09:39 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 09:39 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-11 18:07 - 2013-11-11 18:07 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-11-11 18:07 - 2013-11-11 18:07 - 00000000 ____D C:\Program Files\Common Files\Java 2013-11-09 12:52 - 2013-11-09 12:53 - 00001126 _____ C:\Users\Flavia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-11-09 12:30 - 2013-11-09 12:30 - 00001228 _____ C:\Users\Flavia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-11-09 12:30 - 2013-11-09 12:30 - 00000000 ____D C:\Users\Flavia\AppData\Local\emaze 2013-11-09 12:16 - 2013-11-09 12:16 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\speedtest4354 2013-10-30 14:24 - 2013-10-30 14:29 - 00000000 ____D C:\Users\Flavia\Robert Betz 2013-10-27 09:13 - 2013-10-27 09:13 - 22933792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 15212336 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 10410272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-27 09:13 - 2013-10-27 09:13 - 09524088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 09480328 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 02946848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 02747168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233165.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00893728 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233165.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00560416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00266984 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00161056 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys 2013-10-27 09:13 - 2013-10-27 09:13 - 00141336 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00018174 _____ C:\Windows\system32\nvinfo.pb 2013-10-24 09:16 - 2013-10-24 09:17 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-10-24 09:16 - 2013-10-24 09:16 - 00000000 ____D C:\Program Files\iPod 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer 2013-10-23 08:43 - 2013-11-04 15:48 - 00000000 ____D C:\Users\Flavia\Downloads\Studium 2013-10-23 08:35 - 2013-10-23 08:37 - 00000000 ____D C:\Program Files\PDF24 2013-10-23 08:35 - 2013-10-23 08:35 - 00001822 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe ==================== One Month Modified Files and Folders ======= 2013-11-20 12:10 - 2013-11-16 16:16 - 00022197 _____ C:\Users\Flavia\Desktop\FRST.txt 2013-11-20 12:04 - 2013-11-20 12:04 - 00891184 _____ C:\Users\Flavia\Desktop\SecurityCheck.exe 2013-11-20 11:35 - 2013-01-19 14:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-20 10:45 - 2013-02-12 18:21 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\vlc 2013-11-20 10:23 - 2009-12-27 22:54 - 00000000 ____D C:\Users\Flavia\Documents\KrimsKrams 2013-11-20 10:11 - 2013-11-20 10:11 - 00348187 _____ C:\Users\Flavia\Downloads\Enemy Lines.epub 2013-11-20 09:51 - 2011-07-09 17:33 - 00000000 ____D C:\Users\Flavia\AppData\Local\PMB Files 2013-11-20 09:28 - 2009-07-14 05:34 - 00024368 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-20 09:28 - 2009-07-14 05:34 - 00024368 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-20 09:06 - 2009-12-28 00:26 - 01184153 _____ C:\Windows\WindowsUpdate.log 2013-11-20 09:03 - 2013-11-20 09:03 - 00086976 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2013-11-20 09:03 - 2012-11-09 18:08 - 00031680 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys 2013-11-20 09:03 - 2009-12-28 15:14 - 00000000 ____D C:\Program Files\Common Files\Akamai 2013-11-20 09:02 - 2011-09-25 15:31 - 00246038 _____ C:\Windows\PFRO.log 2013-11-20 09:02 - 2011-09-25 13:34 - 00084190 _____ C:\Windows\setupact.log 2013-11-20 09:02 - 2010-01-20 15:10 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-20 09:02 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-19 17:06 - 2011-05-20 23:31 - 00421870 _____ C:\Windows\system32\perfh012.dat 2013-11-19 17:06 - 2011-05-20 23:31 - 00120002 _____ C:\Windows\system32\perfc012.dat 2013-11-19 17:06 - 2010-01-20 15:25 - 00410276 _____ C:\Windows\system32\perfh011.dat 2013-11-19 17:06 - 2010-01-20 15:25 - 00121714 _____ C:\Windows\system32\perfc011.dat 2013-11-19 17:06 - 2009-12-27 15:41 - 03590398 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-19 15:52 - 2013-11-19 15:52 - 02347384 _____ (ESET) C:\Users\Flavia\Desktop\esetsmartinstaller_enu.exe 2013-11-18 16:46 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default 2013-11-18 16:44 - 2013-11-18 16:44 - 00001723 _____ C:\Users\Flavia\Desktop\JRT.txt 2013-11-18 16:42 - 2013-01-19 13:52 - 00000000 ____D C:\Windows\ERUNT 2013-11-18 16:40 - 2013-11-18 16:40 - 01034531 _____ (Thisisu) C:\Users\Flavia\Desktop\JRT.exe 2013-11-18 16:35 - 2013-11-18 16:26 - 00000000 ____D C:\AdwCleaner 2013-11-18 16:33 - 2012-11-09 18:40 - 00000000 ____D C:\Users\Flavia\AppData\Local\CrashDumps 2013-11-18 16:31 - 2013-11-16 09:55 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-18 16:31 - 2009-12-28 11:04 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2013-11-18 16:26 - 2013-11-18 16:25 - 01085542 _____ C:\Users\Flavia\Desktop\adwcleaner.exe 2013-11-18 16:19 - 2009-07-14 08:49 - 00000000 ____D C:\Windows\ShellNew 2013-11-18 15:58 - 2013-08-02 09:35 - 00000956 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-18 15:53 - 2013-11-18 15:53 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-18 15:53 - 2013-11-18 15:53 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-18 15:52 - 2013-11-18 15:52 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Flavia\Desktop\mbam-setup-1.75.0.1300.exe 2013-11-17 14:03 - 2012-12-05 20:14 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\Spotify 2013-11-17 13:31 - 2013-11-17 13:31 - 00066460 _____ C:\ComboFix.txt 2013-11-17 13:31 - 2013-11-17 13:03 - 00000000 ____D C:\Qoobox 2013-11-17 13:24 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini 2013-11-17 13:21 - 2013-01-18 18:29 - 00000000 ____D C:\Windows\erdnt 2013-11-17 13:02 - 2013-11-17 13:02 - 05146587 ____R (Swearware) C:\Users\Flavia\Desktop\ComboFix.exe 2013-11-17 12:55 - 2013-01-19 14:17 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-11-16 16:16 - 2013-11-16 16:16 - 01090529 _____ (Farbar) C:\Users\Flavia\Desktop\FRST.exe 2013-11-16 16:09 - 2013-11-16 16:09 - 00000000 ____D C:\FRST 2013-11-15 21:14 - 2009-12-27 15:44 - 00000000 ____D C:\Users\Flavia 2013-11-15 17:32 - 2012-12-05 20:15 - 00000000 ____D C:\Users\Flavia\AppData\Local\Spotify 2013-11-15 14:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-11-15 11:00 - 2009-12-28 15:57 - 00000000 ____D C:\Users\Flavia\AppData\Local\Adobe 2013-11-15 10:59 - 2012-03-31 13:51 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-11-15 10:59 - 2011-07-28 10:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-11-13 18:44 - 2011-05-20 23:29 - 00000000 ____D C:\Windows\system32\Drivers\ko-KR 2013-11-13 18:44 - 2010-01-20 15:24 - 00000000 ____D C:\Windows\system32\Drivers\ja-JP 2013-11-13 18:44 - 2009-12-27 16:14 - 00000000 ____D C:\Windows\system32\Drivers\de-DE 2013-11-13 18:44 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ko-KR 2013-11-13 18:44 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ja-JP 2013-11-13 18:44 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-11-13 16:04 - 2010-08-03 18:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-11-13 16:03 - 2010-02-07 22:33 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-11-13 14:58 - 2010-01-17 11:14 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2013-11-13 14:11 - 2012-05-11 13:25 - 00000000 ____D C:\Users\Flavia\Documents\My Digital Editions 2013-11-13 09:50 - 2009-12-27 17:01 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-13 09:49 - 2013-11-13 09:45 - 00012176 _____ C:\Windows\IE11_main.log 2013-11-13 09:45 - 2013-11-13 09:45 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-13 09:45 - 2013-11-13 09:45 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-13 09:45 - 2013-11-13 09:45 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-13 09:45 - 2013-11-13 09:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-13 09:45 - 2013-11-13 09:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-13 09:45 - 2013-11-13 09:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-13 09:45 - 2013-11-13 09:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-13 09:45 - 2013-11-13 09:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-13 09:44 - 2013-07-11 09:02 - 00000000 ____D C:\Windows\system32\MRT 2013-11-13 09:41 - 2009-12-27 16:09 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-11 18:08 - 2013-04-28 09:11 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\streamWriter 2013-11-11 18:07 - 2013-11-11 18:07 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-11 18:07 - 2013-11-11 18:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-11-11 18:07 - 2013-11-11 18:07 - 00000000 ____D C:\Program Files\Common Files\Java 2013-11-11 18:07 - 2013-10-18 16:56 - 00000000 ____D C:\ProgramData\Oracle 2013-11-11 18:05 - 2012-04-18 18:53 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\Audacity 2013-11-10 11:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-11-10 11:36 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-11-09 17:11 - 2013-04-28 09:10 - 00000000 ____D C:\Program Files\streamWriter 2013-11-09 12:53 - 2013-11-09 12:52 - 00001126 _____ C:\Users\Flavia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-11-09 12:30 - 2013-11-09 12:30 - 00001228 _____ C:\Users\Flavia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-11-09 12:30 - 2013-11-09 12:30 - 00000000 ____D C:\Users\Flavia\AppData\Local\emaze 2013-11-09 12:16 - 2013-11-09 12:16 - 00000000 ____D C:\Users\Flavia\AppData\Roaming\speedtest4354 2013-11-05 17:31 - 2011-10-22 12:23 - 01313792 ___SH C:\Users\Public\Downloads\Thumbs.db 2013-11-04 15:48 - 2013-10-23 08:43 - 00000000 ____D C:\Users\Flavia\Downloads\Studium 2013-10-30 14:29 - 2013-10-30 14:24 - 00000000 ____D C:\Users\Flavia\Robert Betz 2013-10-30 13:56 - 2012-07-31 10:34 - 00000000 ____D C:\Users\Flavia\Documents\Eigene Scans 2013-10-27 09:13 - 2013-10-27 09:13 - 22933792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 15212336 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 10410272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-10-27 09:13 - 2013-10-27 09:13 - 09524088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 09480328 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 02946848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 02747168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233165.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00893728 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233165.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00560416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00266984 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00161056 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys 2013-10-27 09:13 - 2013-10-27 09:13 - 00141336 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll 2013-10-27 09:13 - 2013-10-27 09:13 - 00018174 _____ C:\Windows\system32\nvinfo.pb 2013-10-27 09:13 - 2013-04-08 19:08 - 15855568 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll 2013-10-27 09:13 - 2013-04-08 19:08 - 02695200 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll 2013-10-27 09:13 - 2013-04-08 19:08 - 01241376 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshim.dll 2013-10-24 09:17 - 2013-10-24 09:16 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-10-24 09:17 - 2013-09-19 09:24 - 00001757 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-24 09:17 - 2009-12-28 15:14 - 00000000 ____D C:\Program Files\iTunes 2013-10-24 09:16 - 2013-10-24 09:16 - 00000000 ____D C:\Program Files\iPod 2013-10-24 09:16 - 2009-12-28 15:11 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer 2013-10-24 09:15 - 2013-10-24 09:15 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer 2013-10-23 08:37 - 2013-10-23 08:35 - 00000000 ____D C:\Program Files\PDF24 2013-10-23 08:35 - 2013-10-23 08:35 - 00001822 _____ C:\Users\Public\Desktop\PDF24 Editor.lnk 2013-10-23 08:19 - 2013-04-08 10:18 - 03426956 _____ C:\Windows\system32\nvcoproc.bin 2013-10-23 08:19 - 2010-04-03 17:27 - 04318496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-10-23 08:19 - 2010-04-03 17:27 - 03036448 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll 2013-10-23 08:19 - 2010-04-03 17:27 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-10-23 08:19 - 2010-04-03 17:27 - 00664352 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-10-23 08:19 - 2010-04-03 17:27 - 00209184 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-10-23 08:19 - 2009-09-27 17:47 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe Some content of TEMP: ==================== C:\Users\Flavia\AppData\Local\temp\Foxit Reader Updater.exe C:\Users\Flavia\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 10:05 ==================== End Of Log ============================ Hab keine der Daemon Mails mehr bekommen und Senden von Mails aus Outlook funktioniert auch wieder ![]() |
Themen zu Mail delivery failed: returning message to sender |
absender, adware.installbrain, anderem, betreff, emails, empfangen, failed, gestern, gmx.de, landen, lösungen, mailer-daemon@gmx.de, message, nichts, posteingang, problem, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.dealply.a, pup.optional.pcperformer.a, pup.optional.plushd.a, pup.optional.snapdo, sende, sofort, verschickt, versenden |