| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PUP.Optional...... möchte ich loswerdenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.12.2013, 11:07
| #1 |
 |  PUP.Optional...... möchte ich loswerden Hallo, da mir hier schon mal ausgezeichnet geholfen wurde, wende ich mich mal wieder an euch. Ich habe mir wieder was eingefangen.... PUP.Optional.... Ich poste schon mal die MBAM, FRST und ADDITION LOGFILES: Grüße Serti MBAM-log Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.07.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Nura :: NURA-PC [Administrator] Schutz: Aktiviert 07.12.2013 23:26:26 MBAM-log-2013-12-07 (23-31-57).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 210017 Laufzeit: 3 Minute(n), 43 Sekunde(n) Infizierte Speicherprozesse: 5 C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4248 -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 4284 -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 3164 -> Keine Aktion durchgeführt. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 3764 -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe (PUP.Optional.OKitSpace.A) -> 2712 -> Keine Aktion durchgeführt. Infizierte Speichermodule: 1 C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. Infizierte Registrierungsschlüssel: 11 HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt. HKCU\Software\InstalledBrowserExtensions\installdaddy (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{3543619C-D563-43f7-95EA-4DA7E1CC396A} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKCR\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKCR\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKCR\OKitSpace.1 (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKCR\OKitSpace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3543619C-D563-43F7-95EA-4DA7E1CC396A} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKLM\SYSTEM\CurrentControlSet\Services\srvPlgProtect (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 3 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Keine Aktion durchgeführt. HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\updater.exe -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\Updater.exe -> Keine Aktion durchgeführt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 22 C:\Users\Nura\AppData\Local\Temp\CT3317209 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\CT3317212 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\Chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\IE (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\updateSrv (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0 (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. Infizierte Dateien: 58 C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\ICReinstall_malwarebytes-anti-malware.exe (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\nsb2A6.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\nsgE708.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\nsgE979.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\nsn366F.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\nsqFFF6.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\is1070216317\13221039_stp\rcpsetup_adppi_adppi.exe (PUP.Optional.RegCleanerPro) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\mam-ct3317212\mamstub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Windows\Tasks\HDvid Codec V6.0-updater.job (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\CT3317209\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Temp\CT3317212\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\uninstallkit.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\Chrome\OKitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\IE\config (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\IE\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\config.xml (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\Interop.Shell32.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe_old (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\sqlite3.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\versionPPSrv (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files\crxID (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.xpi (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Roaming\okitspace\protect\files\version (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome.manifest (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\install.rdf (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\background.html (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\content.xul (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\main.js (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-19x19.png (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-48x48.png (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin\overlay.css (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\config (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0\45971.crx (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0\Uninstall.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\HDvid Codec V6.0\utils.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\announce.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\background.html (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\common.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\contentscript.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon128.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon16.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon48.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\iframecontentscript.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\manifest.json (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt. (Ende) Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2013 2
Ran by Nura (administrator) on NURA-PC on 08-12-2013 10:42:31
Running from C:\Users\Nura\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Dropbox, Inc.) C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [564352 2012-03-01] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2809856 2012-01-16] (ELAN Microelectronics Corp.)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-09-25] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [6202416 2013-09-25] (Lenovo(beijing) Limited)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1734848 2013-11-27] (Bitdefender)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [560648 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1000488 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2013-11-27] (Bitdefender)
HKCU\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481656 2013-11-20] (Updater)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481656 2013-11-20] (Updater)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4A826951DBB9CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&q={searchTerms}&SSPV=
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: OKitSpace Object - {3543619C-D563-43f7-95EA-4DA7E1CC396A} - C:\Users\Nura\AppData\Roaming\okitspace\IE\OkitSpace.dll ()
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=
CHR RestoreOnStartup: "hxxp://www.haw-hamburg.de/ws-w/unser-department/ankuendigungen.html", "hxxp://www.elearning.haw-hamburg.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Bitdefender 2014) - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
CHR Extension: (Google Docs) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Bitdefender Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.23.0_0
CHR Extension: (Google Search) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (HDvid Codec V6.0) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx
CHR HKLM-x32\...\Chrome\Extension: [hifnddafpdkmjljallgdlkjiiieidmec] - C:\Users\Nura\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-27] (Bitdefender)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 srvPlgProtect; C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe [100864 2013-12-04] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-27] (Bitdefender)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-02] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-02] (BitDefender S.R.L.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00651976 _____ C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:26 - 2013-12-08 10:42 - 00015936 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-07 22:26 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-07 22:25 - 2013-12-07 22:25 - 01927514 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-07 11:10 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-06 17:41 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 _____ C:\END
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-12-06 17:37 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:34 - 2010-11-20 14:34 - 00360832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys
2013-12-05 14:34 - 2010-11-20 14:34 - 00194944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys
2013-12-05 14:34 - 2010-11-20 14:27 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll
2013-12-05 14:34 - 2010-11-20 14:25 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 01369600 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe
2013-12-05 14:34 - 2010-11-20 12:35 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll
2013-12-05 14:34 - 2010-11-20 12:35 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcuxd.sys
2013-12-05 14:34 - 2010-11-20 11:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vmsal.exe
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-04 19:36 - 2013-12-06 17:42 - 00000000 ____D C:\Users\Nura\AppData\Roaming\okitspace
2013-12-04 18:37 - 2013-12-06 17:39 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-04 17:55 - 2013-12-04 18:10 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 18:06 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:54 - 2013-12-04 18:12 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 17:54 - 2013-12-04 18:11 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-12-04 17:54 - 2013-12-04 18:10 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 17:54 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\MetaCrawler
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-02 00:13 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-02 00:09 - 2013-12-02 00:13 - 00009768 _____ C:\Windows\IE11_main.log
2013-11-30 18:05 - 2013-11-06 00:47 - 00000000 ____D C:\Users\Nura\Downloads\Die.Vollpfosten.Never.Change.a.Losing.Team.2012.German.720p.BluRay.x264-ENCOUNTERS
2013-11-27 18:00 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-12-08 09:39 - 00001944 _____ C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job
2013-11-24 20:45 - 2013-12-08 09:39 - 00001324 _____ C:\Windows\Tasks\HDvid Codec V6.0-updater.job
2013-11-24 20:45 - 2013-11-24 20:45 - 00004354 _____ C:\Windows\System32\Tasks\HDvid Codec V6.0-updater
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDvid Codec V6.0
2013-11-24 20:44 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-13 12:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 12:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 12:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 12:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 12:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 12:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 12:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 12:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 12:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 12:14 - 2013-09-25 03:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 12:14 - 2013-09-25 03:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 03:25 - 01446400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 12:14 - 2013-09-25 03:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 12:14 - 2013-09-25 02:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 02:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 12:14 - 2013-07-09 07:26 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
==================== One Month Modified Files and Folders =======
2013-12-08 10:42 - 2013-12-07 22:26 - 00015936 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-08 10:37 - 2013-09-25 09:13 - 01432055 _____ C:\Windows\WindowsUpdate.log
2013-12-08 10:20 - 2011-04-12 08:43 - 00700800 _____ C:\Windows\system32\perfh007.dat
2013-12-08 10:20 - 2011-04-12 08:43 - 00149668 _____ C:\Windows\system32\perfc007.dat
2013-12-08 10:20 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-08 10:18 - 2013-09-25 11:39 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-08 09:39 - 2013-11-24 20:45 - 00001944 _____ C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job
2013-12-08 09:39 - 2013-11-24 20:45 - 00001324 _____ C:\Windows\Tasks\HDvid Codec V6.0-updater.job
2013-12-07 23:30 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:30 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:25 - 2013-10-01 16:12 - 00000000 ___RD C:\Users\Nura\Dropbox
2013-12-07 23:25 - 2013-10-01 16:10 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Dropbox
2013-12-07 23:25 - 2013-09-25 13:14 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-07 23:24 - 2013-09-25 11:39 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-07 23:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-07 23:24 - 2009-07-14 05:51 - 00053059 _____ C:\Windows\setupact.log
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00651976 _____ C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:26 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-07 22:25 - 2013-12-07 22:25 - 01927514 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-07 16:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-07 11:10 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:42 - 2013-12-04 19:36 - 00000000 ____D C:\Users\Nura\AppData\Roaming\okitspace
2013-12-06 17:41 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-06 17:41 - 2013-09-25 09:58 - 00114328 _____ C:\Users\Nura\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-06 17:40 - 2009-07-14 05:45 - 00446472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-06 17:39 - 2013-12-04 18:37 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-06 17:39 - 2010-11-21 04:47 - 00017298 _____ C:\Windows\PFRO.log
2013-12-06 17:37 - 2013-12-05 14:39 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-06 17:32 - 2013-09-28 09:37 - 535523586 _____ C:\Windows\MEMORY.DMP
2013-12-06 17:32 - 2013-09-28 09:37 - 00000000 ____D C:\Windows\Minidump
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 _____ C:\END
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-05 12:30 - 2013-09-24 20:34 - 00000000 ____D C:\Users\Nura\Desktop\Bürgerliches Recht
2013-12-05 12:27 - 2013-09-24 20:31 - 00000000 ____D C:\Users\Nura\Desktop\Rechnungswesen
2013-12-04 21:32 - 2013-09-25 11:22 - 00000000 ____D C:\Users\Nura\AppData\Roaming\vlc
2013-12-04 19:30 - 2013-09-25 09:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-04 19:25 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura\AppData\Local\VirtualStore
2013-12-04 18:12 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 18:11 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-12-04 18:11 - 2013-10-05 16:43 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Systweak
2013-12-04 18:10 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 18:10 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 18:08 - 2013-10-05 16:45 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-04 18:08 - 2013-09-25 09:41 - 00000000 ___RD C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 18:06 - 2013-12-04 17:55 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:55 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\MetaCrawler
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-04 16:52 - 2013-10-23 14:53 - 00000000 ____D C:\Users\Nura\Desktop\country studies
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-03 19:09 - 2013-09-25 11:39 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 19:09 - 2013-09-25 11:39 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 13:22 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Absatz
2013-12-02 13:17 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Grundlagen der BWL
2013-12-02 13:16 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Produktion
2013-12-02 13:13 - 2013-09-24 20:30 - 00000000 ____D C:\Users\Nura\Desktop\Mathematik
2013-12-02 12:13 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Intercultural interaction
2013-12-02 10:27 - 2013-09-25 09:41 - 00001421 _____ C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-02 10:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-02 00:13 - 2013-12-02 00:09 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-30 17:48 - 2013-10-05 16:44 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-28 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-11-27 17:15 - 2013-11-27 18:00 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-27 17:15 - 2013-09-25 11:24 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00004354 _____ C:\Windows\System32\Tasks\HDvid Codec V6.0-updater
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDvid Codec V6.0
2013-11-24 20:45 - 2013-11-24 20:44 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-22 15:42 - 2013-10-05 16:43 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-11-21 16:03 - 2013-09-24 19:03 - 00000000 ____D C:\Users\Nura\Documents\Outlook-Dateien
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 16:54 - 2013-09-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 15:03 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-14 15:00 - 2013-09-25 10:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 14:59 - 2013-09-25 10:54 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\Nura\AppData\Local\Temp\391.10494198839336_Update.exe
C:\Users\Nura\AppData\Local\Temp\86934uninstall.exe
C:\Users\Nura\AppData\Local\Temp\app.exe
C:\Users\Nura\AppData\Local\Temp\BackupSetup.exe
C:\Users\Nura\AppData\Local\Temp\bassmod.dll
C:\Users\Nura\AppData\Local\Temp\ICReinstall_malwarebytes-anti-malware.exe
C:\Users\Nura\AppData\Local\Temp\instloffer.exe
C:\Users\Nura\AppData\Local\Temp\nsb2A6.exe
C:\Users\Nura\AppData\Local\Temp\nsgE708.exe
C:\Users\Nura\AppData\Local\Temp\nsgE979.exe
C:\Users\Nura\AppData\Local\Temp\nsn366F.exe
C:\Users\Nura\AppData\Local\Temp\nsqFFF6.exe
C:\Users\Nura\AppData\Local\Temp\ose00000.exe
C:\Users\Nura\AppData\Local\Temp\Sqlite3.dll
C:\Users\Nura\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Nura\AppData\Local\Temp\_isD883.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 10:51
==================== End Of Log ============================
Additional-log Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2013 2
Ran by Nura at 2013-12-07 22:27:51
Running from C:\Users\Nura\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}
==================== Installed Programs ======================
Adobe Flash Player 11 ActiveX (x32 Version: 11.0.1.152)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Atheros Bluetooth Suite (64) (Version: 7.4.0.135)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.14.15)
Atheros Outlook Addin 2010 (HKCU Version: 1.0.0.0)
Atheros WLAN Client Installation Program (x32 Version: 9.0)
Bitdefender Total Security (Version: 17.15.0.682)
Conexant HD Audio (Version: 8.54.34.0)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.11)
Dropbox (HKCU Version: 2.4.6)
Energy Management (x32 Version: 7.0.4.1)
Google Chrome (x32 Version: 31.0.1650.57)
Google Update Helper (x32 Version: 1.3.22.3)
HDPlayer (x32 Version: 2.1 Build 26473)
HDvid Codec V6.0 (x32 Version: 1.31.153.0)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2778)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
JDownloader 0.9 (x32 Version: 0.9)
Lenovo EasyCamera (x32 Version: 13.11.1206.1)
Lenovo OneKey Recovery (Version: 7.0.0.3712)
Lenovo OneKey Recovery (x32 Version: 7.0.0.3712)
Lenovo pointing device (Version: 10.4.2.8)
LockKey (x32 Version: 1.38.1.2)
Microsoft .NET Framework 4.5 (Version: 4.5.50710)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50710)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61187)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61186)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (Version: 9.0.30729.7523)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (x32 Version: 9.0.30729.7523)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60810 (Version: 11.0.60810)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60810 (Version: 11.0.60810)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60810 (x32 Version: 11.0.60810)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60810 (x32 Version: 11.0.60810)
Microsoft Visual F# 2.0 Runtime (x32 Version: 10.0.40219)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Nero 2014 (x32 Version: 15.0.02200)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)
Nero Blu-ray Player (x32 Version: 12.0.20031)
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015)
Nero Burning Core (x32 Version: 15.0.19000)
Nero Burning ROM (x32 Version: 15.0.19000)
Nero Burning ROM Help (CHM) (x32 Version: 15.0.00018)
Nero ControlCenter (x32 Version: 11.0.16700)
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015)
Nero Core Components (x32 Version: 11.0.22500)
Nero Disc Menus Basic (x32 Version: 12.0.11500)
Nero Effects Basic (x32 Version: 15.0.10011)
Nero Express Help (CHM) (x32 Version: 15.0.00018)
Nero Info (x32 Version: 15.1.0023)
Nero Kwik Themes Basic (x32 Version: 12.0.11500)
Nero Launcher (x32 Version: 15.0.8000)
Nero MediaHome Help (CHM) (x32 Version: 15.0.00018)
Nero PiP Effects Basic (x32 Version: 15.0.10008)
Nero Recode Help (CHM) (x32 Version: 15.0.00018)
Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015)
Nero SharedVideoCodecs (x32 Version: 1.0.15003)
Nero Update (x32 Version: 11.0.13300.42.0)
Nero Video Help (CHM) (x32 Version: 15.0.00015)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Prerequisite installer (x32 Version: 15.0.0005)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7601.39016)
SES Driver (Version: 1.0.0)
SpeedCommander 14 (x64) (Version: 14.30.6900)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2825630) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837643) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837649) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2837642) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition
Update for Microsoft Word 2013 (KB2837630) 64-Bit Edition
Updater (x32 Version: 2.6.49)
VirtualCloneDrive (x32)
VLC media player 2.0.7 (Version: 2.0.7)
VLC media player 2.1.0 (x32 Version: 2.1.0)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (03/06/2009 1.0.0008.0) (Version: 03/06/2009 1.0.0008.0)
Windows-Treiberpaket - Lenovo (ACPIVPC) System (12/15/2011 7.1.0.1) (Version: 12/15/2011 7.1.0.1)
WinRAR 5.00 (64-Bit) (Version: 5.00.0)
==================== Restore Points =========================
25-11-2013 09:05:14 Geplanter Prüfpunkt
01-12-2013 23:09:23 Windows Update
04-12-2013 17:38:08 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:14:05 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:29:53 Installed EPSON TWAIN 5
04-12-2013 18:49:07 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:49:41 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:04 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:23 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:40 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:56 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
05-12-2013 13:33:15 Windows XP Mode wird installiert
05-12-2013 13:34:10 Windows Update
05-12-2013 15:33:23 Installed OpenOffice 4.0.1
06-12-2013 16:35:45 Removed OpenOffice 4.0.1
06-12-2013 16:37:07 Windows XP Mode wird entfernt
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {3463D856-DE5E-46A6-B499-E546E0DD8FB4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {4A989396-A739-41C8-A076-2C7589DA921E} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-09-25] ()
Task: {7B23E692-FC1F-4F72-8880-FA1E5E2608C3} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-08-20] (Nero AG)
Task: {7B74FF61-0323-4EAA-A6B2-C1FAF6A708E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {917F30CF-CB18-4D1E-A712-64C7D8A42D83} - System32\Tasks\HDvid Codec V6.0-updater => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe [2013-11-24] (installdaddy)
Task: {94FE0D26-4CBF-4846-AA4D-1CC32114BD66} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {AEFB8857-FC54-44AD-8AA3-A4FC3FE3120C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {D93AF027-AF39-4856-9327-E09B738E63A9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {F82B6CB2-102B-49F1-8DC9-CC31F6FC1CDA} - System32\Tasks\HDvid Codec V6.0-chromeinstaller => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe [2013-11-24] (installdaddy)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe
Task: C:\Windows\Tasks\HDvid Codec V6.0-updater.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe
==================== Loaded Modules (whitelisted) =============
2013-09-25 11:24 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2013-09-24 01:14 - 2012-06-07 02:51 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2008-12-20 02:20 - 2013-09-25 10:31 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2012-04-19 15:22 - 2013-09-25 10:31 - 01516592 _____ () C:\Program Files (x86)\Lenovo\Energy Management\EMWpfUI.dll
2012-03-10 15:31 - 2013-09-25 10:31 - 00012336 _____ () C:\Program Files (x86)\Lenovo\Energy Management\de-DE\EMWpfUI.resources.dll
2008-12-20 02:20 - 2013-09-25 10:31 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2013-11-20 13:38 - 2013-11-20 13:38 - 00088576 _____ () C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll
2013-09-25 11:24 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Nura\AppData\Roaming\Dropbox\bin\libcef.dll
2013-09-25 09:56 - 2013-09-25 09:56 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2013-09-25 09:56 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-25 09:58 - 2012-02-22 03:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 13582800 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Nura\Desktop\FRST64.exe:BDU
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/07/2013 08:26:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 08:21:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 07:24:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 04:41:22 AM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Updater service wurde wegen dieses Fehlers geschlossen.
Programm: Updater service
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (12/07/2013 04:41:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 1.0.0.1, Zeitstempel: 0x528c2e6b
Name des fehlerhaften Moduls: ole32.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000096
Fehleroffset: 0x00048665
ID des fehlerhaften Prozesses: 0xe44
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3
Error: (12/06/2013 08:26:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 05:41:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 05:37:24 PM) (Source: MsiInstaller) (User: Nura-PC)
Description: Produkt: Windows XP Mode -- Durch diesen Vorgang werden alle Windows XP Mode zugeordneten Dateien entfernt. Die in den virtuellen Festplattendateien von Windows XP Mode gespeicherten Daten werden ebenfalls gelöscht.
Möchten Sie Windows XP Mode deinstallieren?
Error: (12/06/2013 05:33:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/05/2013 09:06:49 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (12/07/2013 10:02:49 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/07/2013 07:13:10 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/07/2013 11:10:23 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/07/2013 11:10:15 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ZAtheros Bt&Wlan Coex Agent erreicht.
Error: (12/07/2013 04:41:24 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/06/2013 10:07:45 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/06/2013 05:33:45 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SafeBox erreicht.
Error: (12/06/2013 05:32:20 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
Error: (12/06/2013 05:32:45 PM) (Source: BugCheck) (User: )
Description: 0x0000009f (0x0000000000000003, 0xfffffa80073e4a10, 0xfffff80000b9c3d8, 0xfffffa8006e60a80)C:\Windows\MEMORY.DMP120613-20904-01
Error: (12/06/2013 05:32:43 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 06.12.2013 um 11:33:23 unerwartet heruntergefahren.
Microsoft Office Sessions:
=========================
Error: (12/07/2013 08:26:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 08:21:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 07:24:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2013 04:41:22 AM) (Source: Application Error)(User: )
Description: Updater service000000000
Error: (12/07/2013 04:41:22 AM) (Source: Application Error)(User: )
Description: updater.exe1.0.0.1528c2e6bole32.DLL6.1.7601.175144ce7b96fc000009600048665e4401cef2b9063c89e3C:\ProgramData\Updater\updater.exeC:\Windows\syswow64\ole32.DLL70233db2-5ef1-11e3-bcbc-208984dabdaa
Error: (12/06/2013 08:26:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 05:41:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/06/2013 05:37:24 PM) (Source: MsiInstaller)(User: Nura-PC)
Description: Produkt: Windows XP Mode -- Durch diesen Vorgang werden alle Windows XP Mode zugeordneten Dateien entfernt. Die in den virtuellen Festplattendateien von Windows XP Mode gespeicherten Daten werden ebenfalls gelöscht.
Möchten Sie Windows XP Mode deinstallieren?(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/06/2013 05:33:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/05/2013 09:06:49 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 8094.36 MB
Available physical RAM: 5549.09 MB
Total Pagefile: 16186.9 MB
Available Pagefile: 13307.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:196.29 GB) (Free:132.2 GB) NTFS
Drive d: (Volume) (Fixed) (Total:268.29 GB) (Free:267.92 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C3FFC3FF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=196 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=268 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
|
|
08.12.2013, 12:36
| #2 | |
| /// the machine /// TB-Ausbilder    | PUP.Optional...... möchte ich loswerden hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
08.12.2013, 21:49
| #3 |
| | PUP.Optional...... möchte ich loswerden Danke für die schnelle Antwort, da ich nebenberuflich noch arbeite
__________________ hats ein bischen gedauert.ComboFix-Log Code:
ATTFilter ComboFix 13-12-08.01 - Nura 08.12.2013 21:35:42.1.4 - x64
TRIBAL WINDOWS 7 ULTIMATE 6.1.7601.1.1252.49.1031.18.8094.5990 [GMT 1:00]
ausgeführt von:: c:\users\Nura\Desktop\ComboFix.exe
AV: Bitdefender Antivirus *Disabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}
FW: Bitdefender Firewall *Disabled* {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}
SP: Bitdefender Spyware-Schutz *Disabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Nura\AppData\Local\assembly\tmp
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_plnkhmnoajbfccclonaeepohggeolcih_0
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_plnkhmnoajbfccclonaeepohggeolcih_0\4
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\background.html
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\crossriderManifest.json
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\manifest.xml
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins.json
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\1_base.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\1000020_analytics.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\1000025_analyticsFront.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\1000030_mz.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\102_dealply_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\103_intext_5_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\104_jollywallet_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\105_corticas_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\108_icm_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\117_coupons_intext_ads_5_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\119_similar_web_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\120_luck_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\123_intext_adv_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\125_arcadi2_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\126_revizer_ws_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\127_revizer_p_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\128_superfish_pricora_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\135_arcadi3_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\138_getdeal_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\141_corticas_ru_m.js.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\142_intext_fa_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\155_ibario_pops_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\159_cortica_rollover_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\17_jQuery.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\171_arcadi2_sourceID_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\175_coolmirage_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\184_noproblemppc_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\189_active_sanity.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\190_pops_5_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\191_ciuvo_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\21_debug.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\22_resources.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\28_initializer.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\47_resources_background.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\64_appApiMessage.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\7_hooks.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\72_appApiValidation.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\87_ginyas_wrapper.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\9_search_engine_hook.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\userCode\background.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\extensionData\userCode\extension.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\icons\actions\1.png
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\icons\icon128.png
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\icons\icon16.png
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\icons\icon48.png
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\api\chrome.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\api\cookie.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\api\message.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\api\pageAction.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\api\pageActionBG.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\background.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\app_api.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\bg_app_api.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\consts.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\cookie_store.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\crossriderAPI.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\delegate.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\events.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\extensionDataStore.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\installer.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\logFile.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\logging.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\onBGDocumentLoad.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\popupResource\newPopup.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\popupResource\popup.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\reports.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\storageWrapper.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\updateManager.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\util.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\lib\xhr.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\js\main.js
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\manifest.json
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0\popup.html
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\000179.ldb
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\000274.ldb
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\000277.ldb
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\000289.ldb
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\000323.log
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\CURRENT
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\LOCK
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\LOG
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\LOG.old
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plnkhmnoajbfccclonaeepohggeolcih\MANIFEST-000321
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_plnkhmnoajbfccclonaeepohggeolcih_0.localstorage-journal
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_plnkhmnoajbfccclonaeepohggeolcih_0.localstorage
c:\users\Nura\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Nura\AppData\Roaming\okitspace
c:\users\Nura\AppData\Roaming\okitspace\Chrome\OKitSpace.crx
c:\users\Nura\AppData\Roaming\okitspace\IE\config
c:\users\Nura\AppData\Roaming\okitspace\IE\OkitSpace.dll
c:\users\Nura\AppData\Roaming\okitspace\protect\config.xml
c:\users\Nura\AppData\Roaming\okitspace\protect\files\crxID
c:\users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.crx
c:\users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.dll
c:\users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.xpi
c:\users\Nura\AppData\Roaming\okitspace\protect\files\version
c:\users\Nura\AppData\Roaming\okitspace\protect\Interop.Shell32.dll
c:\users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe
c:\users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe_old
c:\users\Nura\AppData\Roaming\okitspace\protect\sqlite3.exe
c:\users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll
c:\users\Nura\AppData\Roaming\okitspace\protect\versionPPSrv
c:\users\Nura\AppData\Roaming\okitspace\uninstallkit.exe
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_srvPlgProtect
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-11-08 bis 2013-12-08 ))))))))))))))))))))))))))))))
.
.
2013-12-08 20:39 . 2013-12-08 20:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-07 21:47 . 2013-12-07 21:47 -------- d-----w- c:\users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 21:47 . 2013-12-07 21:47 -------- d-----w- c:\programdata\Malwarebytes
2013-12-07 21:47 . 2013-12-07 21:47 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-12-07 21:47 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-12-07 21:26 . 2013-12-07 21:26 -------- d-----w- C:\FRST
2013-12-07 10:10 . 2013-12-08 20:28 -------- d-----w- c:\users\Nura\AppData\Local\CrashDumps
2013-12-06 16:36 . 2013-12-06 16:36 -------- d-----w- c:\windows\system32\appmgmt
2013-12-05 15:35 . 2013-12-05 15:35 -------- d-----w- c:\users\Nura\AppData\Roaming\OpenOffice
2013-12-05 15:32 . 2013-12-05 15:32 -------- d-----w- c:\programdata\Updater
2013-12-05 15:32 . 2013-12-05 15:32 -------- d-----w- c:\programdata\RHelpers
2013-12-05 15:32 . 2013-12-08 20:41 -------- d-----w- c:\programdata\Websteroids
2013-12-05 14:01 . 2013-12-05 14:01 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2013-12-05 14:00 . 2013-12-05 14:00 -------- d-----w- C:\epson
2013-12-05 13:39 . 2013-12-06 16:37 -------- d-----r- c:\users\Nura\Virtual Machines
2013-12-05 13:34 . 2010-11-20 04:05 3584 ----a-w- c:\windows\system32\drivers\de-DE\vpchbus.sys.mui
2013-12-04 17:37 . 2013-12-06 16:39 -------- d-----w- c:\program files (x86)\epson
2013-12-04 17:05 . 2013-12-04 17:05 -------- d-----w- c:\users\Nura\AppData\Local\Diagnostics
2013-12-04 16:55 . 2013-12-04 17:10 -------- d-----w- c:\users\Nura\AppData\Local\Mobogenie
2013-12-04 16:55 . 2013-12-04 16:55 -------- d-----w- c:\users\wangzhisong
2013-12-04 16:55 . 2013-12-04 16:55 -------- d-----w- c:\users\Nura\AppData\Local\cache
2013-12-04 16:55 . 2013-12-04 17:06 -------- d-----w- c:\program files (x86)\Advanced System Protector
2013-12-04 16:54 . 2013-12-04 17:10 -------- d-----w- c:\program files (x86)\Mobogenie
2013-12-04 16:54 . 2013-12-04 16:54 -------- d-----w- c:\programdata\DivX
2013-12-04 16:54 . 2013-12-04 17:12 -------- d-----w- c:\program files (x86)\DSP-worx
2013-12-04 16:54 . 2013-12-04 16:55 -------- d-----w- c:\users\Nura\AppData\Roaming\LavFilters
2013-12-04 16:54 . 2013-12-04 16:54 -------- d-----w- c:\users\Nura\AppData\Roaming\CDXReader
2013-12-04 16:54 . 2013-12-04 16:54 -------- d-----w- c:\users\Nura\AppData\Roaming\MetaCrawler
2013-12-04 16:54 . 2013-12-04 17:11 -------- d-----w- c:\program files (x86)\RegClean Pro
2013-12-03 18:09 . 2013-12-03 18:09 -------- d-----w- c:\program files (x86)\GUMA7C.tmp
2013-12-01 23:13 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-11-27 17:00 . 2013-11-27 16:15 74512 ----a-w- c:\windows\SysWow64\bdsandboxuiskin32.dll
2013-11-27 16:15 . 2013-11-27 16:15 84848 ----a-w- c:\windows\system32\bdsandboxuiskin.dll
2013-11-27 16:15 . 2013-11-27 16:15 74512 ----a-w- c:\windows\system32\bdsandboxuiskin32.dll
2013-11-27 16:15 . 2013-11-27 16:15 34384 ----a-w- c:\windows\system32\bdsandboxuh.dll
2013-11-24 19:52 . 2013-11-24 19:52 -------- d-----w- c:\program files (x86)\VideoLAN
2013-11-24 19:51 . 2013-11-24 19:51 -------- d-----w- c:\users\Nura\AppData\Local\Programs
2013-11-24 19:45 . 2013-11-24 19:45 -------- d-----w- c:\program files (x86)\HDvid Codec V6.0
2013-11-24 19:44 . 2013-11-24 19:45 -------- d-----w- c:\program files (x86)\HDPlayer
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-27 16:15 . 2013-09-25 10:24 82824 ----a-w- c:\windows\system32\drivers\bdsandbox.sys
2013-11-22 14:42 . 2013-10-05 15:43 20312 ----a-w- c:\windows\system32\roboot64.exe
2013-11-14 13:59 . 2013-09-25 09:54 82896128 ----a-w- c:\windows\system32\MRT.exe
2013-10-02 19:19 . 2013-10-02 19:19 389240 ----a-w- c:\windows\system32\drivers\trufos.sys
2013-10-02 19:18 . 2013-09-25 10:23 150256 ----a-w- c:\windows\system32\drivers\gzflt.sys
2013-09-25 13:49 . 2013-09-25 13:49 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-25 10:26 . 2013-09-25 10:26 440783 ----a-w- c:\programdata\1380104586.bdinstall.bin
2013-09-25 09:31 . 2013-09-25 09:31 19872 ----a-w- c:\windows\system32\LenovoSDKEmSubSystem.dll
2013-09-25 09:31 . 2011-12-15 12:09 30816 ----a-w- c:\windows\system32\drivers\AcpiVpc.sys
2013-09-25 09:31 . 2013-09-25 09:31 39008 ----a-w- c:\windows\system32\drivers\LhdX64.sys
2013-09-15 22:50 . 2013-09-25 09:53 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{61F2AABD-D8EE-4196-A935-B764FE958AC5}\mpengine.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-10-21 03:48 1725640 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-10-21 03:48 1725640 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-10-21 03:48 1725640 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bitdefender-Geldbörse-Agent"="c:\program files\Bitdefender\Bitdefender\pmbxag.exe" [2013-11-27 560648]
"Bitdefender-Geldbörse"="c:\program files\Bitdefender\Bitdefender\pwdmanui.exe" [2013-11-27 1000488]
"Bitdefender-Geldbörse-Anwendungs-Agent"="c:\program files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" [2013-11-27 612696]
"Updater"="c:\programdata\Updater\updater.exe" [2013-11-20 481656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-20 507744]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2011-11-24 548864]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"LockKey"="c:\program files (x86)\LockKey\LockKey.exe" [2011-08-25 337776]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2013-03-10 88984]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-09-05 958576]
"Updater"="c:\programdata\Updater\Updater.exe" [2013-11-20 481656]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Bitdefender-Geldbörse-Agent"="c:\program files\Bitdefender\Bitdefender\pmbxag.exe" [2013-11-27 560648]
"Bitdefender-Geldbörse"="c:\program files\Bitdefender\Bitdefender\pwdmanui.exe" [2013-11-27 1000488]
"Bitdefender-Geldbörse-Anwendungs-Agent"="c:\program files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" [2013-11-27 612696]
.
c:\users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-11-1 29769432]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x]
R3 bdfwfpf_pc;bdfwfpf_pc;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys;c:\windows\SYSNATIVE\drivers\bdsandbox.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys;c:\windows\SYSNATIVE\Drivers\RTSUVSTOR.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 vpcuxd;USB-Virtualisierungsstubdienst;c:\windows\system32\DRIVERS\vpcuxd.sys;c:\windows\SYSNATIVE\DRIVERS\vpcuxd.sys [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender\bdparentalservice.exe;c:\program files\Bitdefender\Bitdefender\bdparentalservice.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 BDVEDISK;BDVEDISK;c:\windows\system32\DRIVERS\bdvedisk.sys;c:\windows\SYSNATIVE\DRIVERS\bdvedisk.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 SafeBox;SafeBox;c:\program files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe;c:\program files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender\updatesrv.exe;c:\program files\Bitdefender\Bitdefender\updatesrv.exe [x]
S2 ZAtheros Bt&Wlan Coex Agent;ZAtheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys;c:\windows\SYSNATIVE\DRIVERS\avchv.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 20:05 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25 10:39]
.
2013-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25 10:39]
.
2013-12-08 c:\windows\Tasks\HDvid Codec V6.0-chromeinstaller.job
- c:\program files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe [2013-11-24 19:45]
.
2013-12-08 c:\windows\Tasks\HDvid Codec V6.0-updater.job
- c:\program files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe [2013-11-24 19:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-10-21 03:43 2328776 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-10-21 03:43 2328776 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-10-21 03:43 2328776 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 164016 ----a-w- c:\users\Nura\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox1]
@="{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}"
[HKEY_CLASSES_ROOT\CLSID\{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}]
2013-07-08 13:59 206352 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox2]
@="{342DAA0B-D796-460D-8566-901E08A1CCAD}"
[HKEY_CLASSES_ROOT\CLSID\{342DAA0B-D796-460D-8566-901E08A1CCAD}]
2013-07-08 13:59 206352 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox3]
@="{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}"
[HKEY_CLASSES_ROOT\CLSID\{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}]
2013-07-08 13:59 206352 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox4]
@="{33816773-98AE-4723-ADE0-EBE54C8B5A67}"
[HKEY_CLASSES_ROOT\CLSID\{33816773-98AE-4723-ADE0-EBE54C8B5A67}]
2013-07-08 13:59 206352 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-06-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-06-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-06-07 440128]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-03-01 564352]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-02-21 1654400]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2013-09-25 8079408]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2013-09-25 6202416]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\btvstack.exe" [2012-04-28 1022592]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\athbttray.exe" [2012-04-28 801920]
"Bdagent"="c:\program files\Bitdefender\Bitdefender\bdagent.exe" [2013-11-27 1734848]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\programdata\RHelpers\ChromeHelper\ChromeHelper.exe
c:\programdata\RHelpers\FireFoxHelper\FireFoxHelper.exe
c:\programdata\RHelpers\IEHelper\IeHelper.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-12-08 21:44:25 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-12-08 20:44
.
Vor Suchlauf: 9 Verzeichnis(se), 143.435.120.640 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 143.415.853.056 Bytes frei
.
- - End Of File - - 4365AEBB6ED285AE622571B20257CB3A
|
|
09.12.2013, 10:23
| #4 | |
| /// the machine /// TB-Ausbilder | PUP.Optional...... möchte ich loswerdenZitat:
 Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.12.2013, 13:35
| #5 |
| | PUP.Optional...... möchte ich loswerden MBAM-log Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.09.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Nura :: NURA-PC [Administrator] Schutz: Aktiviert 09.12.2013 11:16:55 mbam-log-2013-12-09 (11-16-55).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 217872 Laufzeit: 3 Minute(n), 16 Sekunde(n) Infizierte Speicherprozesse: 4 C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4584 -> Löschen bei Neustart. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 5052 -> Löschen bei Neustart. C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4764 -> Löschen bei Neustart. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 4436 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 17 HKCR\AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{3543619C-D563-43f7-95EA-4DA7E1CC396A} (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\OKitSpace.1 (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\OKitSpace (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3543619C-D563-43F7-95EA-4DA7E1CC396A} (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{3543619C-D563-43f7-95EA-4DA7E1CC396A} (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\OKitSpace.1 (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\OKitSpace (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3543619C-D563-43F7-95EA-4DA7E1CC396A} (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstalledBrowserExtensions\installdaddy (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 3 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\updater.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\Updater.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 14 C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. C:\Program Files (x86)\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0 (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 34 C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Löschen bei Neustart. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Löschen bei Neustart. C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Löschen bei Neustart. C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\okitSpace\IE\OkitSpace.dll (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\okitSpace\IE\OkitSpace.dll (PUP.Optional.OfferBox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\HDvid Codec V6.0-updater.job (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Löschen bei Neustart. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome.manifest (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\install.rdf (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\background.html (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\content.xul (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\main.js (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-19x19.png (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-48x48.png (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin\overlay.css (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\config (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HDvid Codec V6.0\45971.crx (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HDvid Codec V6.0\Uninstall.exe (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\HDvid Codec V6.0\utils.exe (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\announce.js (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\background.html (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\common.js (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\contentscript.js (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon128.png (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon16.png (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon48.png (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\iframecontentscript.js (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\manifest.json (PUP.Optional.MultiIE) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 09/12/2013 um 12:24:49
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Nura - NURA-PC
# Gestartet von : C:\Users\Nura\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\Advanced System Protector
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Users\Nura\AppData\Roaming\MetaCrawler
Ordner Gelöscht : C:\Users\Nura\AppData\Roaming\Systweak
Datei Gelöscht : C:\Windows\System32\roboot64.exe
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hifnddafpdkmjljallgdlkjiiieidmec
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DynConIE
Schlüssel Gelöscht : HKLM\Software\SoftwareUpdater
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Vittalia
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Google Chrome v31.0.1650.57
[ Datei : C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [2069 octets] - [09/12/2013 12:23:58]
AdwCleaner[S0].txt - [1759 octets] - [09/12/2013 12:24:49]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1819 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x64
Ran by Nura on 09.12.2013 at 12:31:53,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.12.2013 at 12:40:03,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST-log FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03
Ran by Nura (administrator) on NURA-PC on 09-12-2013 13:25:31
Running from C:\Users\Nura\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(Dropbox, Inc.) C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [564352 2012-03-01] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2809856 2012-01-16] (ELAN Microelectronics Corp.)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-09-25] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [6202416 2013-09-25] (Lenovo(beijing) Limited)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1734848 2013-11-27] (Bitdefender)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [560648 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1000488 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2013-11-27] (Bitdefender)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4A826951DBB9CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1
CHR Extension: (Google Drive) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1
CHR Extension: (YouTube) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Bitdefender Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.23.0_1
CHR Extension: (Google Search) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (Google Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1
CHR Extension: (Gmail) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (HDvid Codec V6.0) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-27] (Bitdefender)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-27] (Bitdefender)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-02] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-02] (BitDefender S.R.L.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 13:25 - 2013-12-09 13:25 - 01927998 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-09 13:25 - 2013-12-09 13:25 - 00014021 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-09 13:25 - 2013-12-09 13:25 - 00000000 ____D C:\Users\Nura\Desktop\FRST-OlderVersion
2013-12-09 12:40 - 2013-12-09 12:40 - 00000754 _____ C:\Users\Nura\Desktop\JRT.txt
2013-12-09 12:31 - 2013-12-09 12:31 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Downloads\JRT (1).exe
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Desktop\JRT.exe
2013-12-09 12:27 - 2013-12-09 12:27 - 00001899 _____ C:\Users\Nura\Desktop\AdwCleaner[S0].txt
2013-12-09 12:23 - 2013-12-09 12:24 - 00000000 ____D C:\AdwCleaner
2013-12-09 12:22 - 2013-12-09 12:22 - 01110034 _____ C:\Users\Nura\Desktop\adwcleaner.exe
2013-12-08 21:44 - 2013-12-08 21:44 - 00046504 _____ C:\ComboFix.txt
2013-12-08 21:34 - 2013-12-08 21:44 - 00000000 ____D C:\Qoobox
2013-12-08 21:34 - 2013-12-08 21:43 - 00000000 ____D C:\Windows\erdnt
2013-12-08 21:34 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-08 21:34 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-08 21:34 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-08 21:30 - 2013-12-08 21:30 - 05153091 ____R (Swearware) C:\Users\Nura\Desktop\ComboFix.exe
2013-12-08 12:02 - 2013-12-08 12:02 - 01035016 _____ C:\Windows\Minidump\120813-20810-01.dmp
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:27 - 2013-12-07 22:28 - 00025313 _____ C:\Users\Nura\Desktop\Addition.txt
2013-12-07 22:26 - 2013-12-09 13:25 - 00000000 ____D C:\FRST
2013-12-07 11:10 - 2013-12-08 21:28 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-09 11:27 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-08 21:41 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-12-06 17:37 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:34 - 2010-11-20 14:34 - 00360832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys
2013-12-05 14:34 - 2010-11-20 14:34 - 00194944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys
2013-12-05 14:34 - 2010-11-20 14:27 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll
2013-12-05 14:34 - 2010-11-20 14:25 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 01369600 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe
2013-12-05 14:34 - 2010-11-20 12:35 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll
2013-12-05 14:34 - 2010-11-20 12:35 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcuxd.sys
2013-12-05 14:34 - 2010-11-20 11:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vmsal.exe
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-04 18:37 - 2013-12-06 17:39 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-04 17:55 - 2013-12-04 18:10 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:54 - 2013-12-04 18:12 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 17:54 - 2013-12-04 18:10 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 17:54 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-02 00:13 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-02 00:09 - 2013-12-02 00:13 - 00009768 _____ C:\Windows\IE11_main.log
2013-11-30 18:05 - 2013-11-06 00:47 - 00000000 ____D C:\Users\Nura\Downloads\Die.Vollpfosten.Never.Change.a.Losing.Team.2012.German.720p.BluRay.x264-ENCOUNTERS
2013-11-27 18:00 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:44 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-13 12:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 12:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 12:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 12:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 12:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 12:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 12:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 12:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 12:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 12:14 - 2013-09-25 03:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 12:14 - 2013-09-25 03:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 03:25 - 01446400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 12:14 - 2013-09-25 03:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 12:14 - 2013-09-25 02:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 02:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 12:14 - 2013-07-09 07:26 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
==================== One Month Modified Files and Folders =======
2013-12-09 13:25 - 2013-12-09 13:25 - 01927998 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-09 13:25 - 2013-12-09 13:25 - 00014021 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-09 13:25 - 2013-12-09 13:25 - 00000000 ____D C:\Users\Nura\Desktop\FRST-OlderVersion
2013-12-09 13:25 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-09 13:14 - 2013-09-25 11:39 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 13:14 - 2011-04-12 08:43 - 00700800 _____ C:\Windows\system32\perfh007.dat
2013-12-09 13:14 - 2011-04-12 08:43 - 00149668 _____ C:\Windows\system32\perfc007.dat
2013-12-09 13:14 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-09 12:40 - 2013-12-09 12:40 - 00000754 _____ C:\Users\Nura\Desktop\JRT.txt
2013-12-09 12:33 - 2013-09-25 09:13 - 01679915 _____ C:\Windows\WindowsUpdate.log
2013-12-09 12:31 - 2013-12-09 12:31 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 12:31 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 12:31 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Downloads\JRT (1).exe
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Desktop\JRT.exe
2013-12-09 12:27 - 2013-12-09 12:27 - 00001899 _____ C:\Users\Nura\Desktop\AdwCleaner[S0].txt
2013-12-09 12:26 - 2013-10-01 16:12 - 00000000 ___RD C:\Users\Nura\Dropbox
2013-12-09 12:26 - 2013-10-01 16:10 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Dropbox
2013-12-09 12:26 - 2013-09-25 13:14 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-09 12:26 - 2013-09-25 11:39 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 12:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-09 12:25 - 2009-07-14 05:51 - 00053619 _____ C:\Windows\setupact.log
2013-12-09 12:24 - 2013-12-09 12:23 - 00000000 ____D C:\AdwCleaner
2013-12-09 12:22 - 2013-12-09 12:22 - 01110034 _____ C:\Users\Nura\Desktop\adwcleaner.exe
2013-12-09 11:27 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-09 11:27 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-09 11:27 - 2010-11-21 04:47 - 00031062 _____ C:\Windows\PFRO.log
2013-12-08 21:44 - 2013-12-08 21:44 - 00046504 _____ C:\ComboFix.txt
2013-12-08 21:44 - 2013-12-08 21:34 - 00000000 ____D C:\Qoobox
2013-12-08 21:44 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-08 21:43 - 2013-12-08 21:34 - 00000000 ____D C:\Windows\erdnt
2013-12-08 21:41 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-08 21:41 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-08 21:40 - 2009-07-14 03:34 - 66060288 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 15990784 _____ C:\Windows\system32\config\SYSTEM.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak
2013-12-08 21:30 - 2013-12-08 21:30 - 05153091 ____R (Swearware) C:\Users\Nura\Desktop\ComboFix.exe
2013-12-08 21:28 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-08 12:02 - 2013-12-08 12:02 - 01035016 _____ C:\Windows\Minidump\120813-20810-01.dmp
2013-12-08 12:02 - 2013-09-28 09:37 - 690991746 _____ C:\Windows\MEMORY.DMP
2013-12-08 12:02 - 2013-09-28 09:37 - 00000000 ____D C:\Windows\Minidump
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:28 - 2013-12-07 22:27 - 00025313 _____ C:\Users\Nura\Desktop\Addition.txt
2013-12-07 16:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-06 17:41 - 2013-09-25 09:58 - 00114328 _____ C:\Users\Nura\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-06 17:40 - 2009-07-14 05:45 - 00446472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-06 17:39 - 2013-12-04 18:37 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-06 17:37 - 2013-12-05 14:39 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-05 12:30 - 2013-09-24 20:34 - 00000000 ____D C:\Users\Nura\Desktop\Bürgerliches Recht
2013-12-05 12:27 - 2013-09-24 20:31 - 00000000 ____D C:\Users\Nura\Desktop\Rechnungswesen
2013-12-04 21:32 - 2013-09-25 11:22 - 00000000 ____D C:\Users\Nura\AppData\Roaming\vlc
2013-12-04 19:30 - 2013-09-25 09:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-04 19:25 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura\AppData\Local\VirtualStore
2013-12-04 18:12 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 18:10 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 18:10 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 18:08 - 2013-09-25 09:41 - 00000000 ___RD C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:55 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-04 16:52 - 2013-10-23 14:53 - 00000000 ____D C:\Users\Nura\Desktop\country studies
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-03 19:09 - 2013-09-25 11:39 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 19:09 - 2013-09-25 11:39 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 13:22 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Absatz
2013-12-02 13:17 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Grundlagen der BWL
2013-12-02 13:16 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Produktion
2013-12-02 13:13 - 2013-09-24 20:30 - 00000000 ____D C:\Users\Nura\Desktop\Mathematik
2013-12-02 12:13 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Intercultural interaction
2013-12-02 10:27 - 2013-09-25 09:41 - 00001421 _____ C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-02 10:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-02 00:13 - 2013-12-02 00:09 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-30 17:48 - 2013-10-05 16:44 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-28 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-11-27 17:15 - 2013-11-27 18:00 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-27 17:15 - 2013-09-25 11:24 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:44 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-21 16:03 - 2013-09-24 19:03 - 00000000 ____D C:\Users\Nura\Documents\Outlook-Dateien
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 16:54 - 2013-09-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 15:03 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-14 15:00 - 2013-09-25 10:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 14:59 - 2013-09-25 10:54 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\Nura\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 10:51
==================== End Of Log ============================
--- --- --- |
|
10.12.2013, 09:31
| #6 |
| /// the machine /// TB-Ausbilder | PUP.Optional...... möchte ich loswerdenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> PUP.Optional...... möchte ich loswerden |
|
10.12.2013, 21:10
| #7 |
| | PUP.Optional...... möchte ich loswerden ESET-log Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b9df82bfc51de24ea758ddc2cf814c61
# engine=16217
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-10 07:55:46
# local_time=2013-12-10 08:55:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 6602522 138335196 0 0
# scanned=114693
# found=0
# cleaned=0
# scan_time=4092
SeC.log Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Bitdefender Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Reader XI Google Chrome 31.0.1650.48 Google Chrome 31.0.1650.57 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe Bitdefender Bitdefender vsserv.exe Bitdefender Bitdefender updatesrv.exe Bitdefender Bitdefender SafeBox safeboxservice.exe Bitdefender Bitdefender bdagent.exe Bitdefender Bitdefender pmbxag.exe Bitdefender Bitdefender antispam32 bdapppassmgr.exe Bitdefender Bitdefender seccenter.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST-log FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013
Ran by Nura (administrator) on NURA-PC on 10-12-2013 21:04:23
Running from C:\Users\Nura\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Dropbox, Inc.) C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [564352 2012-03-01] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2809856 2012-01-16] (ELAN Microelectronics Corp.)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-09-25] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [6202416 2013-09-25] (Lenovo(beijing) Limited)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1734848 2013-11-27] (Bitdefender)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [560648 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1000488 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2013-11-27] (Bitdefender)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4A826951DBB9CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Docs) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1
CHR Extension: (Google Drive) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1
CHR Extension: (YouTube) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Bitdefender Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.23.0_1
CHR Extension: (Google Search) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (Google Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1
CHR Extension: (Gmail) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR Extension: (HDvid Codec V6.0) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-27] (Bitdefender)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-27] (Bitdefender)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-02] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-02] (BitDefender S.R.L.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-10 19:42 - 2013-12-10 19:41 - 00891200 _____ C:\Users\Nura\Desktop\SecurityCheck.exe
2013-12-10 19:41 - 2013-12-10 19:41 - 00891200 _____ C:\Users\Nura\Downloads\SecurityCheck.exe
2013-12-10 19:37 - 2013-12-10 19:37 - 02347384 _____ (ESET) C:\Users\Nura\Downloads\esetsmartinstaller_enu.exe
2013-12-10 19:37 - 2013-12-10 19:37 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-09 13:25 - 2013-12-10 21:04 - 01928110 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-09 13:25 - 2013-12-10 21:04 - 00013571 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-09 13:25 - 2013-12-10 21:04 - 00000000 ____D C:\Users\Nura\Desktop\FRST-OlderVersion
2013-12-09 12:40 - 2013-12-09 12:40 - 00000754 _____ C:\Users\Nura\Desktop\JRT.txt
2013-12-09 12:31 - 2013-12-09 12:31 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Downloads\JRT (1).exe
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Desktop\JRT.exe
2013-12-09 12:27 - 2013-12-09 12:27 - 00001899 _____ C:\Users\Nura\Desktop\AdwCleaner[S0].txt
2013-12-09 12:23 - 2013-12-09 12:24 - 00000000 ____D C:\AdwCleaner
2013-12-09 12:22 - 2013-12-09 12:22 - 01110034 _____ C:\Users\Nura\Desktop\adwcleaner.exe
2013-12-08 21:44 - 2013-12-08 21:44 - 00046504 _____ C:\ComboFix.txt
2013-12-08 21:34 - 2013-12-08 21:44 - 00000000 ____D C:\Qoobox
2013-12-08 21:34 - 2013-12-08 21:43 - 00000000 ____D C:\Windows\erdnt
2013-12-08 21:34 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-08 21:34 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-08 21:34 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-08 21:34 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-08 21:30 - 2013-12-08 21:30 - 05153091 ____R (Swearware) C:\Users\Nura\Desktop\ComboFix.exe
2013-12-08 12:02 - 2013-12-08 12:02 - 01035016 _____ C:\Windows\Minidump\120813-20810-01.dmp
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:27 - 2013-12-07 22:28 - 00025313 _____ C:\Users\Nura\Desktop\Addition.txt
2013-12-07 22:26 - 2013-12-10 21:04 - 00000000 ____D C:\FRST
2013-12-07 11:10 - 2013-12-08 21:28 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-09 11:27 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 16:32 - 2013-12-09 11:27 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-08 21:41 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-12-06 17:37 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:34 - 2010-11-20 14:34 - 00360832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys
2013-12-05 14:34 - 2010-11-20 14:34 - 00194944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys
2013-12-05 14:34 - 2010-11-20 14:27 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll
2013-12-05 14:34 - 2010-11-20 14:25 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 01369600 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe
2013-12-05 14:34 - 2010-11-20 12:35 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll
2013-12-05 14:34 - 2010-11-20 12:35 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcuxd.sys
2013-12-05 14:34 - 2010-11-20 11:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vmsal.exe
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-04 18:37 - 2013-12-06 17:39 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-04 17:55 - 2013-12-04 18:10 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:54 - 2013-12-04 18:12 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 17:54 - 2013-12-04 18:10 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 17:54 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-02 00:13 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-02 00:09 - 2013-12-02 00:13 - 00009768 _____ C:\Windows\IE11_main.log
2013-11-30 18:05 - 2013-11-06 00:47 - 00000000 ____D C:\Users\Nura\Downloads\Die.Vollpfosten.Never.Change.a.Losing.Team.2012.German.720p.BluRay.x264-ENCOUNTERS
2013-11-27 18:00 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:44 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-13 12:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 12:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 12:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 12:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 12:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 12:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 12:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 12:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 12:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 12:14 - 2013-09-25 03:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 12:14 - 2013-09-25 03:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 03:25 - 01446400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 12:14 - 2013-09-25 03:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 12:14 - 2013-09-25 02:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 02:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 12:14 - 2013-07-09 07:26 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
==================== One Month Modified Files and Folders =======
2013-12-10 21:04 - 2013-12-09 13:25 - 01928110 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-10 21:04 - 2013-12-09 13:25 - 00013571 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-10 21:04 - 2013-12-09 13:25 - 00000000 ____D C:\Users\Nura\Desktop\FRST-OlderVersion
2013-12-10 21:04 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-10 20:14 - 2013-09-25 11:39 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-10 19:41 - 2013-12-10 19:42 - 00891200 _____ C:\Users\Nura\Desktop\SecurityCheck.exe
2013-12-10 19:41 - 2013-12-10 19:41 - 00891200 _____ C:\Users\Nura\Downloads\SecurityCheck.exe
2013-12-10 19:41 - 2013-09-25 09:13 - 01796000 _____ C:\Windows\WindowsUpdate.log
2013-12-10 19:38 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-10 19:38 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-10 19:37 - 2013-12-10 19:37 - 02347384 _____ (ESET) C:\Users\Nura\Downloads\esetsmartinstaller_enu.exe
2013-12-10 19:37 - 2013-12-10 19:37 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-10 19:34 - 2013-10-01 16:12 - 00000000 ___RD C:\Users\Nura\Dropbox
2013-12-10 19:34 - 2013-10-01 16:10 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Dropbox
2013-12-10 19:34 - 2013-09-25 11:39 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-10 19:33 - 2013-09-25 13:14 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-10 19:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-10 19:32 - 2009-07-14 05:51 - 00054528 _____ C:\Windows\setupact.log
2013-12-10 13:00 - 2011-04-12 08:43 - 00700800 _____ C:\Windows\system32\perfh007.dat
2013-12-10 13:00 - 2011-04-12 08:43 - 00149668 _____ C:\Windows\system32\perfc007.dat
2013-12-10 13:00 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-09 12:40 - 2013-12-09 12:40 - 00000754 _____ C:\Users\Nura\Desktop\JRT.txt
2013-12-09 12:31 - 2013-12-09 12:31 - 00000000 ____D C:\Windows\ERUNT
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Downloads\JRT (1).exe
2013-12-09 12:29 - 2013-12-09 12:29 - 01034531 _____ (Thisisu) C:\Users\Nura\Desktop\JRT.exe
2013-12-09 12:27 - 2013-12-09 12:27 - 00001899 _____ C:\Users\Nura\Desktop\AdwCleaner[S0].txt
2013-12-09 12:24 - 2013-12-09 12:23 - 00000000 ____D C:\AdwCleaner
2013-12-09 12:22 - 2013-12-09 12:22 - 01110034 _____ C:\Users\Nura\Desktop\adwcleaner.exe
2013-12-09 11:27 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-09 11:27 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-09 11:27 - 2010-11-21 04:47 - 00031062 _____ C:\Windows\PFRO.log
2013-12-08 21:44 - 2013-12-08 21:44 - 00046504 _____ C:\ComboFix.txt
2013-12-08 21:44 - 2013-12-08 21:34 - 00000000 ____D C:\Qoobox
2013-12-08 21:44 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-08 21:43 - 2013-12-08 21:34 - 00000000 ____D C:\Windows\erdnt
2013-12-08 21:41 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-08 21:41 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-08 21:40 - 2009-07-14 03:34 - 66060288 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 15990784 _____ C:\Windows\system32\config\SYSTEM.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-12-08 21:40 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak
2013-12-08 21:30 - 2013-12-08 21:30 - 05153091 ____R (Swearware) C:\Users\Nura\Desktop\ComboFix.exe
2013-12-08 21:28 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-08 12:02 - 2013-12-08 12:02 - 01035016 _____ C:\Windows\Minidump\120813-20810-01.dmp
2013-12-08 12:02 - 2013-09-28 09:37 - 690991746 _____ C:\Windows\MEMORY.DMP
2013-12-08 12:02 - 2013-09-28 09:37 - 00000000 ____D C:\Windows\Minidump
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:28 - 2013-12-07 22:27 - 00025313 _____ C:\Users\Nura\Desktop\Addition.txt
2013-12-07 16:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-06 17:41 - 2013-09-25 09:58 - 00114328 _____ C:\Users\Nura\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-06 17:40 - 2009-07-14 05:45 - 00446472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-06 17:39 - 2013-12-04 18:37 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-06 17:37 - 2013-12-05 14:39 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-05 12:30 - 2013-09-24 20:34 - 00000000 ____D C:\Users\Nura\Desktop\Bürgerliches Recht
2013-12-05 12:27 - 2013-09-24 20:31 - 00000000 ____D C:\Users\Nura\Desktop\Rechnungswesen
2013-12-04 21:32 - 2013-09-25 11:22 - 00000000 ____D C:\Users\Nura\AppData\Roaming\vlc
2013-12-04 19:30 - 2013-09-25 09:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-04 19:25 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura\AppData\Local\VirtualStore
2013-12-04 18:12 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 18:10 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 18:10 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 18:08 - 2013-09-25 09:41 - 00000000 ___RD C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:55 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-04 16:52 - 2013-10-23 14:53 - 00000000 ____D C:\Users\Nura\Desktop\country studies
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-03 19:09 - 2013-09-25 11:39 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 19:09 - 2013-09-25 11:39 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 13:22 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Absatz
2013-12-02 13:17 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Grundlagen der BWL
2013-12-02 13:16 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Produktion
2013-12-02 13:13 - 2013-09-24 20:30 - 00000000 ____D C:\Users\Nura\Desktop\Mathematik
2013-12-02 12:13 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Intercultural interaction
2013-12-02 10:27 - 2013-09-25 09:41 - 00001421 _____ C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-02 10:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-02 00:13 - 2013-12-02 00:09 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-30 17:48 - 2013-10-05 16:44 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-28 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-11-27 17:15 - 2013-11-27 18:00 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-27 17:15 - 2013-09-25 11:24 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:44 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-21 16:03 - 2013-09-24 19:03 - 00000000 ____D C:\Users\Nura\Documents\Outlook-Dateien
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 16:54 - 2013-09-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 15:03 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-14 15:00 - 2013-09-25 10:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 14:59 - 2013-09-25 10:54 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\Nura\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-02 10:51
==================== End Of Log ============================
--- --- --- Ansonsten macht der Rechner keine Probleme  Grüße Serti --- --- --- |
|
11.12.2013, 12:50
| #8 |
| /// the machine /// TB-Ausbilder | PUP.Optional...... möchte ich loswerden Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.12.2013, 11:47
| #9 |
| | PUP.Optional...... möchte ich loswerden Alles super! Danke! Ich werde mich dann mal in die Spendeabteilung aufmachen. Grüße Serti |
|
12.12.2013, 13:01
| #10 |
| /// the machine /// TB-Ausbilder | PUP.Optional...... möchte ich loswerden Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
