![]() |
|
Log-Analyse und Auswertung: Win 7 nach Softwareaktualisierung langsam,WINTrust.dll fehltWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Win 7 nach Softwareaktualisierung langsam,WINTrust.dll fehlt Hallo zusammen, ich habe hier ein Problem mit dem Laptop meines alten Herren,er hatte Probleme damit gehabt,das die intregierte Kamera über Skype nicht mehr funktionierte und beschloss irgendwelche Software zu aktualisieren. Nun geht die Kamera wieder aber alles andere ist nicht mehr so wie vorher. Es waren zig Sidebar´s installiert,die Homeseite war nun Freemium usw... Im allgemeinen ist der Laptop sehr langsam,ich habe so einige Probleme selber lösen können,komme nun leider nicht mehr weiter. Folgende Probleme bestehen noch: *Windows Defender lässt sich nicht aktivieren,siehe Anhang *Windows Update lässt sich nicht aktivieren,siehe Anhang *Einige Programme wie CCleaner lassen sich nicht öffnen,siehe Anhang Ich fürchte hier hat sich schädliches Programm eingenistet. Wie soll ich nun die Probleme angehen? Gruß P.S: Hie die Logs FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2013 01 Ran by Tolga (administrator) on TURGAY on 14-12-2013 00:26:33 Running from D:\Download Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\BisonCam\BisonHK.exe (Bison Inc.) C:\Windows\BisonCam\InitDriverx64.exe (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [fssui] - C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe [884584 2012-03-08] (Microsoft Corporation) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor) HKLM\...\Run: [BisonHK] - C:\Windows\BisonCam\BisonHK.exe [77824 2007-10-03] () HKLM\...\Run: [BisonInst0402] - C:\Windows\BisonCam\InitDriverx64.exe [36864 2007-09-10] (Bison Inc.) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Facebook Update] - C:\Users\Tolga\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-16] (Facebook Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.) HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6503704 2013-12-05] (SUPERAntiSpyware) HKLM-x32\...\Run: [UnlockerAssistant] - C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe [15872 2010-03-08] () HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-14] (Avira Operations GmbH & Co. KG) HKU\Fatma\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation) HKU\Fatma\...\Run: [SearchProtect] - C:\Users\Fatma\AppData\Roaming\SearchProtect\bin\cltmng.exe IFEO\notepad.exe: [Debugger] "C:\Program Files (x86)\Notepad2\Notepad2.exe" /z ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0B76C9E17A60CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File URLSearchHook: HKCU - (No Name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No File SearchScopes: HKLM-x32 - DefaultScope {E0E94456-6B8C-4C3F-99C9-D94589AD8268} URL = SearchScopes: HKCU - DefaultScope {E0E94456-6B8C-4C3F-99C9-D94589AD8268} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {E0E94456-6B8C-4C3F-99C9-D94589AD8268} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {F6586BB4-1968-4851-94C6-C1FF0A8F0D75} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=NDV&o=15765&src=kw&q={searchTerms}&locale=&apn_ptnrs=NY&apn_dtid=YYYYYYYYDE&apn_uid=6B8E7406-5252-4DD1-AF08-9513E11DAB15&apn_sauid=9B9694CB-1F5F-4F89-AB0E-1A4EC4B51FBB& BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Oracle) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default FF SearchEngineOrder.1: Search the web (Babylon) FF Homepage: google.de FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3311336&SearchSource=2&CUI=UN97941412323445956&UM=2&sspv=TB_CNI&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Tolga\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: vitzo.com/VDownloader - d:\VDownloader\Addons\npVDownloader.dll (Vitzo) FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\conduit.xml FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\icqplugin-1.xml FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\icqplugin-2.xml FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\icqplugin.xml FF SearchPlugin: C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: vis - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM FF Extension: No Name - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\staged FF Extension: DVDVideoSoftTB - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} FF Extension: Freemium DE - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\{e66f4171-0f28-4599-a595-58b840522f7e} FF Extension: DealPly - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} FF Extension: Adblock Plus - C:\Users\Tolga\AppData\Roaming\Mozilla\Firefox\Profiles\tbrlxwog.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [support@vdownloader.com] - d:\VDownloader\Addons\FireFox FF Extension: VDownloader - d:\VDownloader\Addons\FireFox ==================== Services (Whitelisted) ================= R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG) S2 CryptSvc; C:\Windows\system32\cryptsvc.dll [0 2013-07-09] () S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) S2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132504 2013-03-17] (Symantec Corporation) R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-09-30] (Avira Operations GmbH & Co. KG) S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) U3 JavaQuickStarterService; S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-14 00:26 - 2013-12-14 00:26 - 00000000 ____D C:\FRST 2013-12-14 00:23 - 2013-12-14 00:23 - 00000000 _____ C:\Users\Tolga\defogger_reenable 2013-12-11 23:31 - 2013-12-14 00:21 - 00000442 _____ C:\Windows\Tasks\ParetoLogic Update Version3.job 2013-12-11 23:31 - 2013-12-13 23:51 - 00000400 _____ C:\Windows\Tasks\PC Health Advisor Defrag.job 2013-12-11 23:31 - 2013-12-13 18:00 - 00000468 _____ C:\Windows\Tasks\ParetoLogic Registration3.job 2013-12-11 23:31 - 2013-12-11 23:31 - 00003270 _____ C:\Windows\System32\Tasks\PC Health Advisor Defrag 2013-12-11 23:31 - 2013-12-11 23:31 - 00003256 _____ C:\Windows\System32\Tasks\ParetoLogic Update Version3 2013-12-11 23:31 - 2013-12-11 23:31 - 00003132 _____ C:\Windows\System32\Tasks\ParetoLogic Registration3 2013-12-11 23:31 - 2013-12-11 23:31 - 00001097 _____ C:\Users\Tolga\Desktop\ParetoLogic PC Health Advisor.lnk 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\ParetoLogic 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\DriverCure 2013-12-11 23:30 - 2013-12-11 23:31 - 00003302 _____ C:\Windows\System32\Tasks\PC Health Advisor 2013-12-11 23:30 - 2013-12-11 23:31 - 00000382 _____ C:\Windows\Tasks\PC Health Advisor.job 2013-12-11 23:30 - 2013-12-11 23:30 - 00000000 ____D C:\ProgramData\ParetoLogic 2013-12-11 23:30 - 2013-12-11 23:30 - 00000000 ____D C:\Program Files (x86)\ParetoLogic 2013-12-11 23:14 - 2013-12-13 23:14 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420.job 2013-12-11 23:14 - 2013-12-13 02:00 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec.job 2013-12-11 23:14 - 2013-12-11 23:14 - 00003584 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec 2013-12-11 23:14 - 2013-12-11 23:14 - 00003510 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420 2013-12-11 23:13 - 2013-12-14 00:08 - 00001852 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\SUPERAntiSpyware.com 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2013-12-11 22:39 - 2013-12-11 22:39 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Malwarebytes 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-11 22:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-11 20:57 - 2013-12-11 20:57 - 00000000 ____D C:\Users\Fatma\AppData\Local\{80CEF70E-13D8-4594-A94C-9C79518FD753} 2013-12-11 08:47 - 2013-12-11 08:47 - 00000000 __SHD C:\found.002 2013-12-08 10:30 - 2013-12-08 10:30 - 00000000 __SHD C:\found.001 2013-12-07 10:58 - 2013-12-07 22:58 - 00000000 ____D C:\Users\Tolga\AppData\Local\{E665575F-2B4F-4CFD-9489-746DF351ABAB} 2013-12-06 12:26 - 2013-12-06 12:27 - 00000000 ____D C:\Users\Tolga\AppData\Local\{23F798D3-DFD6-4353-9EC4-52D2D0572803} 2013-12-05 17:08 - 2013-12-05 17:08 - 00000000 ____D C:\Users\Fatma\AppData\Local\Software_Updater 2013-12-05 14:53 - 2013-12-11 22:57 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\Systweak 2013-12-05 10:44 - 2013-12-06 12:42 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-12-05 10:41 - 2013-12-06 12:39 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Systweak 2013-12-05 10:41 - 2013-09-17 11:25 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2013-12-05 09:59 - 2013-12-05 09:59 - 00004110 _____ C:\Windows\System32\Tasks\FreeDriverScout 2013-12-05 09:59 - 2013-12-05 09:59 - 00000000 ____D C:\Users\Tolga\Documents\Freemium Driver Utilities 2013-12-05 09:59 - 2013-12-05 09:59 - 00000000 ____D C:\ProgramData\FreeDriverScout 2013-12-05 09:45 - 2013-12-05 09:45 - 00000000 ____D C:\Users\Tolga\AppData\Local\{425BF97A-EF4E-46E3-84CD-F075206BD177} 2013-12-05 09:43 - 2013-12-05 09:44 - 00000000 ____D C:\Users\Fatma\AppData\Local\{522D90BD-7860-4319-935C-1323A4B2F595} 2013-12-04 21:25 - 2013-12-04 21:26 - 00000000 ____D C:\Users\Fatma\AppData\Local\{217619FE-B147-4011-A8DB-B8800C2318A3} 2013-12-04 12:39 - 2013-12-07 11:06 - 00035679 _____ C:\Windows\IE11_main.log 2013-12-04 12:34 - 2013-12-04 12:34 - 00000000 ____D C:\Users\Tolga\AppData\Local\{49035C38-5DF6-4E51-B611-F19637CBFA36} 2013-12-03 10:46 - 2013-12-03 10:48 - 00000000 ____D C:\Users\Tolga\AppData\Local\{A5BE9E4A-1367-404F-8B67-264F523996E3} 2013-12-02 19:39 - 2013-12-02 19:39 - 00000000 ____D C:\Users\Tolga\AppData\Local\{75303E90-2F43-4898-9590-076C03F17C43} 2013-12-01 19:34 - 2013-12-01 19:35 - 00000000 ____D C:\Users\Fatma\AppData\Local\{C1C797F9-7E68-4E3E-8F18-06A053C4C9A8} 2013-12-01 19:32 - 2013-12-11 22:57 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\Iminent 2013-12-01 19:30 - 2013-12-11 22:57 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\SearchProtect 2013-12-01 14:36 - 2013-12-01 14:36 - 00000000 ____D C:\Users\Tolga\AppData\Local\Software_Updater 2013-12-01 13:24 - 2013-12-06 13:50 - 00000898 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog 2013-12-01 13:23 - 2013-12-01 13:23 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Windows Net Data 2013-12-01 13:23 - 2013-12-01 13:23 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2013-12-01 13:22 - 2013-12-13 16:14 - 00004196 _____ C:\Windows\System32\Tasks\Software Updater 2013-12-01 13:22 - 2013-12-13 16:14 - 00004134 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-12-01 13:21 - 2013-12-13 16:15 - 00000000 ____D C:\Program Files\SoftwareUpdater 2013-12-01 13:21 - 2013-12-01 13:21 - 00000000 ____D C:\Program Files\Covus Freemium 2013-12-01 13:18 - 2013-12-11 22:57 - 00000000 ____D C:\ProgramData\Conduit 2013-12-01 13:17 - 2013-12-01 13:20 - 00000009 _____ C:\END 2013-12-01 13:16 - 2013-12-11 22:57 - 00000000 ____D C:\Users\Tolga\AppData\Local\DownloadGuide 2013-12-01 10:17 - 2013-12-01 10:18 - 00000000 ____D C:\Users\Tolga\AppData\Local\{2F8F1307-B325-442E-8F69-F3BCE113957B} 2013-11-30 20:09 - 2013-11-30 20:10 - 00000000 ____D C:\Users\Fatma\AppData\Local\{401861B1-08B8-4CED-9C88-98620FE526D3} 2013-11-30 11:13 - 2013-11-30 11:13 - 00000000 ____D C:\Users\Tolga\AppData\Local\{17318E14-06DD-407C-B796-84476DB30205} 2013-11-29 12:53 - 2013-11-29 12:53 - 00000000 ____D C:\Users\Tolga\AppData\Local\{7A75BABA-37E5-4C1D-9253-D4261886D455} 2013-11-28 15:30 - 2013-11-28 15:31 - 00000000 ____D C:\Users\Fatma\AppData\Local\{EBB00E31-15B3-4FFA-8465-5A87E64F2995} 2013-11-28 15:27 - 2013-11-28 15:27 - 00262144 ____N C:\Windows\Minidump\112813-21325-01.dmp 2013-11-28 09:06 - 2013-11-28 09:07 - 00000000 ____D C:\Users\Tolga\AppData\Local\{F3EAC806-7917-446F-8FDA-8608281B8DB3} 2013-11-27 22:49 - 2013-11-27 22:49 - 00262144 ____N C:\Windows\Minidump\112713-20654-01.dmp 2013-11-27 14:51 - 2013-11-27 14:51 - 00277752 _____ C:\Windows\Minidump\112713-21777-01.dmp 2013-11-27 09:47 - 2013-11-27 09:48 - 00000000 ____D C:\Users\Tolga\AppData\Local\{843A8058-E478-4290-82A9-FE307EED8114} 2013-11-26 22:44 - 2013-11-26 22:46 - 00000000 ____D C:\Users\Fatma\AppData\Local\{822B64D3-28C3-4DA9-B375-03B3BC8A28D2} 2013-11-26 12:24 - 2013-11-26 12:24 - 00000000 ____D C:\Users\Tolga\AppData\Local\{FC582865-A2B0-415B-9472-DAD597A9E17B} 2013-11-25 10:25 - 2013-11-25 10:25 - 00000000 ____D C:\Users\Tolga\AppData\Local\{CC5473FA-9F30-4284-BE70-BE690A947D17} 2013-11-24 18:57 - 2013-11-24 18:58 - 00000000 ____D C:\Users\Fatma\AppData\Local\{19405E7B-BB4D-4C97-971D-3F35C98A9439} 2013-11-24 12:21 - 2013-11-24 12:22 - 00000000 ____D C:\Users\Tolga\AppData\Local\{DD57E671-D50C-45C0-B666-8FF3910AF8E7} 2013-11-23 19:19 - 2013-11-23 19:22 - 00000000 ____D C:\Users\Fatma\AppData\Local\{66C7D042-98EB-4134-B771-D9797CDE9907} 2013-11-23 09:58 - 2013-11-23 09:59 - 00000000 ____D C:\Users\Tolga\AppData\Local\{709B6B71-0AE1-4B58-8610-B28575E68882} 2013-11-22 18:45 - 2013-11-22 18:47 - 00000000 ____D C:\Users\Fatma\AppData\Local\{82FAA3AC-C5CE-46A3-AEBB-7F70509224D0} 2013-11-22 09:55 - 2013-11-22 09:55 - 00000000 ____D C:\Users\Tolga\AppData\Local\{F9D724AC-4904-4909-9761-111E82054B20} 2013-11-21 17:26 - 2013-11-21 17:27 - 00000000 ____D C:\Users\Tolga\AppData\Local\{4F47194F-ED7E-43E9-B4F2-9793B362A622} 2013-11-20 20:52 - 2013-11-20 20:53 - 00000000 ____D C:\Users\Fatma\AppData\Local\{8863CF31-E3F5-4F66-A065-CD413122E109} 2013-11-20 08:58 - 2013-11-20 08:58 - 00000000 ____D C:\Users\Tolga\AppData\Local\{6C9A447E-4E90-4041-870F-8DE9514B9181} 2013-11-20 08:53 - 2013-11-20 08:53 - 00277752 _____ C:\Windows\Minidump\112013-24710-01.dmp 2013-11-19 20:57 - 2013-11-19 20:57 - 00000000 ____D C:\Users\Tolga\AppData\Local\{B2908AB2-C49B-4C64-96C1-8DFB61C79A9E} 2013-11-19 08:56 - 2013-11-19 08:57 - 00000000 ____D C:\Users\Tolga\AppData\Local\{6A571933-3019-4F82-86DD-3DF9C8638BFB} 2013-11-19 08:54 - 2013-11-19 08:54 - 00277752 _____ C:\Windows\Minidump\111913-22573-01.dmp 2013-11-18 09:01 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-18 09:01 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-18 08:14 - 2013-11-18 08:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\{2F9634EF-7DFE-4EAD-B54F-631385D35B13} 2013-11-17 19:26 - 2013-11-17 19:26 - 00000000 ____D C:\Users\Fatma\AppData\Local\{9EFBF928-172B-49D6-8DDC-A936D5191C3D} 2013-11-17 10:56 - 2013-11-17 10:56 - 00000000 ____D C:\Windows\CheckSur 2013-11-17 10:52 - 2013-11-17 10:52 - 00000000 ____D C:\Users\Tolga\AppData\Local\{8A765B28-C683-4A4C-8B12-00022C69B759} 2013-11-16 10:17 - 2013-11-16 10:17 - 00000000 ____D C:\Users\Tolga\AppData\Local\{E67C632F-DD29-46B2-B79A-D30374FAD4C9} 2013-11-15 22:34 - 2013-11-16 10:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-15 22:16 - 2013-11-15 22:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\{85C825B0-C048-42B1-915D-178895A00CD3} 2013-11-15 10:16 - 2013-11-15 10:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\{786948CF-597C-4A75-8D84-C1CD52619095} 2013-11-14 21:30 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 21:30 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 21:30 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 21:30 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 21:30 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 21:30 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 21:30 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 21:30 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 21:30 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 21:30 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 21:30 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 21:30 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 20:09 - 2013-11-14 20:09 - 00000000 ____D C:\Users\Tolga\AppData\Local\{613082CD-E810-42E3-821A-777D354FAD90} 2013-11-14 12:56 - 2013-11-14 12:56 - 00262144 ____N C:\Windows\Minidump\111413-22292-01.dmp 2013-11-14 08:19 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 08:19 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 08:18 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 08:18 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 08:18 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 08:18 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 08:18 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 08:18 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 08:18 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 08:18 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 08:18 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 08:18 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 08:18 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 08:18 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 08:18 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 08:18 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 08:18 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 08:18 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 08:18 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 08:18 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 08:18 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 08:18 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 08:18 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 08:18 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 08:18 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 08:18 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 08:18 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 08:18 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-14 08:08 - 2013-11-14 08:09 - 00000000 ____D C:\Users\Tolga\AppData\Local\{977DD278-5576-47FF-AF02-500C7B99283E} ==================== One Month Modified Files and Folders ======= 2013-12-14 00:26 - 2013-12-14 00:26 - 00000000 ____D C:\FRST 2013-12-14 00:23 - 2013-12-14 00:23 - 00000000 _____ C:\Users\Tolga\defogger_reenable 2013-12-14 00:23 - 2011-09-20 08:43 - 00000000 ____D C:\Users\Tolga 2013-12-14 00:21 - 2013-12-11 23:31 - 00000442 _____ C:\Windows\Tasks\ParetoLogic Update Version3.job 2013-12-14 00:08 - 2013-12-11 23:13 - 00001852 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2013-12-14 00:08 - 2013-05-12 15:12 - 00000866 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-12-13 23:58 - 2012-07-16 19:53 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000UA.job 2013-12-13 23:56 - 2013-05-28 11:56 - 00000290 _____ C:\Windows\Tasks\Dealply.job 2013-12-13 23:51 - 2013-12-11 23:31 - 00000400 _____ C:\Windows\Tasks\PC Health Advisor Defrag.job 2013-12-13 23:30 - 2012-06-24 15:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-13 23:14 - 2013-12-11 23:14 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420.job 2013-12-13 20:58 - 2012-07-16 19:53 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000Core.job 2013-12-13 18:00 - 2013-12-11 23:31 - 00000468 _____ C:\Windows\Tasks\ParetoLogic Registration3.job 2013-12-13 16:15 - 2013-12-01 13:21 - 00000000 ____D C:\Program Files\SoftwareUpdater 2013-12-13 16:14 - 2013-12-01 13:22 - 00004196 _____ C:\Windows\System32\Tasks\Software Updater 2013-12-13 16:14 - 2013-12-01 13:22 - 00004134 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-12-13 02:00 - 2013-12-11 23:14 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec.job 2013-12-12 22:30 - 2012-06-24 15:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-12 22:30 - 2012-06-24 15:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-12 22:30 - 2011-09-22 15:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 23:58 - 2013-05-12 15:59 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Skype 2013-12-11 23:31 - 2013-12-11 23:31 - 00003270 _____ C:\Windows\System32\Tasks\PC Health Advisor Defrag 2013-12-11 23:31 - 2013-12-11 23:31 - 00003256 _____ C:\Windows\System32\Tasks\ParetoLogic Update Version3 2013-12-11 23:31 - 2013-12-11 23:31 - 00003132 _____ C:\Windows\System32\Tasks\ParetoLogic Registration3 2013-12-11 23:31 - 2013-12-11 23:31 - 00001097 _____ C:\Users\Tolga\Desktop\ParetoLogic PC Health Advisor.lnk 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\ParetoLogic 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic 2013-12-11 23:31 - 2013-12-11 23:31 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\DriverCure 2013-12-11 23:31 - 2013-12-11 23:30 - 00003302 _____ C:\Windows\System32\Tasks\PC Health Advisor 2013-12-11 23:31 - 2013-12-11 23:30 - 00000382 _____ C:\Windows\Tasks\PC Health Advisor.job 2013-12-11 23:30 - 2013-12-11 23:30 - 00000000 ____D C:\ProgramData\ParetoLogic 2013-12-11 23:30 - 2013-12-11 23:30 - 00000000 ____D C:\Program Files (x86)\ParetoLogic 2013-12-11 23:14 - 2013-12-11 23:14 - 00003584 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec 2013-12-11 23:14 - 2013-12-11 23:14 - 00003510 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\SUPERAntiSpyware.com 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2013-12-11 23:13 - 2013-12-11 23:13 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2013-12-11 23:07 - 2009-07-14 05:45 - 00019792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-11 23:07 - 2009-07-14 05:45 - 00019792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-11 22:59 - 2013-05-13 09:57 - 00030165 _____ C:\Windows\setupact.log 2013-12-11 22:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-11 22:58 - 2013-08-15 13:50 - 00146034 _____ C:\Windows\PFRO.log 2013-12-11 22:57 - 2013-12-05 14:53 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\Systweak 2013-12-11 22:57 - 2013-12-01 19:32 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\Iminent 2013-12-11 22:57 - 2013-12-01 19:30 - 00000000 ____D C:\Users\Fatma\AppData\Roaming\SearchProtect 2013-12-11 22:57 - 2013-12-01 13:18 - 00000000 ____D C:\ProgramData\Conduit 2013-12-11 22:57 - 2013-12-01 13:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\DownloadGuide 2013-12-11 22:39 - 2013-12-11 22:39 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Malwarebytes 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-11 22:39 - 2013-12-11 22:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-11 22:21 - 2009-07-14 03:34 - 00000807 _____ C:\Windows\win.ini 2013-12-11 20:57 - 2013-12-11 20:57 - 00000000 ____D C:\Users\Fatma\AppData\Local\{80CEF70E-13D8-4594-A94C-9C79518FD753} 2013-12-11 20:54 - 2012-11-13 16:16 - 00000000 ____D C:\Users\Fatma\Tracing 2013-12-11 08:47 - 2013-12-11 08:47 - 00000000 __SHD C:\found.002 2013-12-08 10:30 - 2013-12-08 10:30 - 00000000 __SHD C:\found.001 2013-12-07 23:56 - 2011-12-27 03:59 - 01876962 _____ C:\Windows\WindowsUpdate.log 2013-12-07 22:58 - 2013-12-07 10:58 - 00000000 ____D C:\Users\Tolga\AppData\Local\{E665575F-2B4F-4CFD-9489-746DF351ABAB} 2013-12-07 11:06 - 2013-12-04 12:39 - 00035679 _____ C:\Windows\IE11_main.log 2013-12-06 13:50 - 2013-12-01 13:24 - 00000898 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog 2013-12-06 12:42 - 2013-12-05 10:44 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-12-06 12:42 - 2011-09-20 08:45 - 00000000 ___RD C:\Users\Tolga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-06 12:39 - 2013-12-05 10:41 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Systweak 2013-12-06 12:27 - 2013-12-06 12:26 - 00000000 ____D C:\Users\Tolga\AppData\Local\{23F798D3-DFD6-4353-9EC4-52D2D0572803} 2013-12-05 17:08 - 2013-12-05 17:08 - 00000000 ____D C:\Users\Fatma\AppData\Local\Software_Updater 2013-12-05 10:16 - 2011-09-22 15:10 - 00000000 ____D C:\Users\Tolga\AppData\Local\Conduit 2013-12-05 09:59 - 2013-12-05 09:59 - 00004110 _____ C:\Windows\System32\Tasks\FreeDriverScout 2013-12-05 09:59 - 2013-12-05 09:59 - 00000000 ____D C:\Users\Tolga\Documents\Freemium Driver Utilities 2013-12-05 09:59 - 2013-12-05 09:59 - 00000000 ____D C:\ProgramData\FreeDriverScout 2013-12-05 09:45 - 2013-12-05 09:45 - 00000000 ____D C:\Users\Tolga\AppData\Local\{425BF97A-EF4E-46E3-84CD-F075206BD177} 2013-12-05 09:44 - 2013-12-05 09:43 - 00000000 ____D C:\Users\Fatma\AppData\Local\{522D90BD-7860-4319-935C-1323A4B2F595} 2013-12-04 21:26 - 2013-12-04 21:25 - 00000000 ____D C:\Users\Fatma\AppData\Local\{217619FE-B147-4011-A8DB-B8800C2318A3} 2013-12-04 12:34 - 2013-12-04 12:34 - 00000000 ____D C:\Users\Tolga\AppData\Local\{49035C38-5DF6-4E51-B611-F19637CBFA36} 2013-12-03 10:50 - 2013-10-15 18:44 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-03 10:48 - 2013-12-03 10:46 - 00000000 ____D C:\Users\Tolga\AppData\Local\{A5BE9E4A-1367-404F-8B67-264F523996E3} 2013-12-02 19:39 - 2013-12-02 19:39 - 00000000 ____D C:\Users\Tolga\AppData\Local\{75303E90-2F43-4898-9590-076C03F17C43} 2013-12-01 19:35 - 2013-12-01 19:34 - 00000000 ____D C:\Users\Fatma\AppData\Local\{C1C797F9-7E68-4E3E-8F18-06A053C4C9A8} 2013-12-01 14:36 - 2013-12-01 14:36 - 00000000 ____D C:\Users\Tolga\AppData\Local\Software_Updater 2013-12-01 13:23 - 2013-12-01 13:23 - 00000000 ____D C:\Users\Tolga\AppData\Roaming\Windows Net Data 2013-12-01 13:23 - 2013-12-01 13:23 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2013-12-01 13:21 - 2013-12-01 13:21 - 00000000 ____D C:\Program Files\Covus Freemium 2013-12-01 13:20 - 2013-12-01 13:17 - 00000009 _____ C:\END 2013-12-01 10:18 - 2013-12-01 10:17 - 00000000 ____D C:\Users\Tolga\AppData\Local\{2F8F1307-B325-442E-8F69-F3BCE113957B} 2013-11-30 20:10 - 2013-11-30 20:09 - 00000000 ____D C:\Users\Fatma\AppData\Local\{401861B1-08B8-4CED-9C88-98620FE526D3} 2013-11-30 18:50 - 2011-09-20 08:40 - 01646916 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-11-30 18:50 - 2009-07-14 18:58 - 00702630 _____ C:\Windows\system32\perfh007.dat 2013-11-30 18:50 - 2009-07-14 18:58 - 00150358 _____ C:\Windows\system32\perfc007.dat 2013-11-30 11:13 - 2013-11-30 11:13 - 00000000 ____D C:\Users\Tolga\AppData\Local\{17318E14-06DD-407C-B796-84476DB30205} 2013-11-29 12:54 - 2012-11-05 12:53 - 00000000 ____D C:\Users\Tolga\Desktop\bearbeitungsgebühren 2013-11-29 12:53 - 2013-11-29 12:53 - 00000000 ____D C:\Users\Tolga\AppData\Local\{7A75BABA-37E5-4C1D-9253-D4261886D455} 2013-11-28 15:31 - 2013-11-28 15:30 - 00000000 ____D C:\Users\Fatma\AppData\Local\{EBB00E31-15B3-4FFA-8465-5A87E64F2995} 2013-11-28 15:27 - 2013-11-28 15:27 - 00262144 ____N C:\Windows\Minidump\112813-21325-01.dmp 2013-11-28 15:27 - 2012-06-25 12:17 - 00000000 ____D C:\Windows\Minidump 2013-11-28 09:07 - 2013-11-28 09:06 - 00000000 ____D C:\Users\Tolga\AppData\Local\{F3EAC806-7917-446F-8FDA-8608281B8DB3} 2013-11-27 22:49 - 2013-11-27 22:49 - 00262144 ____N C:\Windows\Minidump\112713-20654-01.dmp 2013-11-27 14:51 - 2013-11-27 14:51 - 00277752 _____ C:\Windows\Minidump\112713-21777-01.dmp 2013-11-27 09:51 - 2009-07-14 06:13 - 01621242 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-27 09:48 - 2013-11-27 09:47 - 00000000 ____D C:\Users\Tolga\AppData\Local\{843A8058-E478-4290-82A9-FE307EED8114} 2013-11-26 22:46 - 2013-11-26 22:44 - 00000000 ____D C:\Users\Fatma\AppData\Local\{822B64D3-28C3-4DA9-B375-03B3BC8A28D2} 2013-11-26 12:24 - 2013-11-26 12:24 - 00000000 ____D C:\Users\Tolga\AppData\Local\{FC582865-A2B0-415B-9472-DAD597A9E17B} 2013-11-25 10:25 - 2013-11-25 10:25 - 00000000 ____D C:\Users\Tolga\AppData\Local\{CC5473FA-9F30-4284-BE70-BE690A947D17} 2013-11-24 18:58 - 2013-11-24 18:57 - 00000000 ____D C:\Users\Fatma\AppData\Local\{19405E7B-BB4D-4C97-971D-3F35C98A9439} 2013-11-24 12:22 - 2013-11-24 12:21 - 00000000 ____D C:\Users\Tolga\AppData\Local\{DD57E671-D50C-45C0-B666-8FF3910AF8E7} 2013-11-23 19:22 - 2013-11-23 19:19 - 00000000 ____D C:\Users\Fatma\AppData\Local\{66C7D042-98EB-4134-B771-D9797CDE9907} 2013-11-23 09:59 - 2013-11-23 09:58 - 00000000 ____D C:\Users\Tolga\AppData\Local\{709B6B71-0AE1-4B58-8610-B28575E68882} 2013-11-22 18:47 - 2013-11-22 18:45 - 00000000 ____D C:\Users\Fatma\AppData\Local\{82FAA3AC-C5CE-46A3-AEBB-7F70509224D0} 2013-11-22 09:55 - 2013-11-22 09:55 - 00000000 ____D C:\Users\Tolga\AppData\Local\{F9D724AC-4904-4909-9761-111E82054B20} 2013-11-21 17:27 - 2013-11-21 17:26 - 00000000 ____D C:\Users\Tolga\AppData\Local\{4F47194F-ED7E-43E9-B4F2-9793B362A622} 2013-11-20 20:53 - 2013-11-20 20:52 - 00000000 ____D C:\Users\Fatma\AppData\Local\{8863CF31-E3F5-4F66-A065-CD413122E109} 2013-11-20 08:58 - 2013-11-20 08:58 - 00000000 ____D C:\Users\Tolga\AppData\Local\{6C9A447E-4E90-4041-870F-8DE9514B9181} 2013-11-20 08:53 - 2013-11-20 08:53 - 00277752 _____ C:\Windows\Minidump\112013-24710-01.dmp 2013-11-19 20:57 - 2013-11-19 20:57 - 00000000 ____D C:\Users\Tolga\AppData\Local\{B2908AB2-C49B-4C64-96C1-8DFB61C79A9E} 2013-11-19 14:43 - 2012-06-24 15:39 - 00001912 _____ C:\Windows\epplauncher.mif 2013-11-19 14:42 - 2012-06-24 15:38 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-11-19 14:42 - 2012-06-24 15:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-11-19 11:21 - 2011-09-20 08:39 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-19 08:57 - 2013-11-19 08:56 - 00000000 ____D C:\Users\Tolga\AppData\Local\{6A571933-3019-4F82-86DD-3DF9C8638BFB} 2013-11-19 08:54 - 2013-11-19 08:54 - 00277752 _____ C:\Windows\Minidump\111913-22573-01.dmp 2013-11-18 08:16 - 2013-11-18 08:14 - 00000000 ____D C:\Users\Tolga\AppData\Local\{2F9634EF-7DFE-4EAD-B54F-631385D35B13} 2013-11-17 19:26 - 2013-11-17 19:26 - 00000000 ____D C:\Users\Fatma\AppData\Local\{9EFBF928-172B-49D6-8DDC-A936D5191C3D} 2013-11-17 10:56 - 2013-11-17 10:56 - 00000000 ____D C:\Windows\CheckSur 2013-11-17 10:52 - 2013-11-17 10:52 - 00000000 ____D C:\Users\Tolga\AppData\Local\{8A765B28-C683-4A4C-8B12-00022C69B759} 2013-11-17 10:49 - 2012-05-24 19:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-16 10:17 - 2013-11-16 10:17 - 00000000 ____D C:\Users\Tolga\AppData\Local\{E67C632F-DD29-46B2-B79A-D30374FAD4C9} 2013-11-16 10:04 - 2013-11-15 22:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-15 22:16 - 2013-11-15 22:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\{85C825B0-C048-42B1-915D-178895A00CD3} 2013-11-15 11:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-15 10:16 - 2013-11-15 10:16 - 00000000 ____D C:\Users\Tolga\AppData\Local\{786948CF-597C-4A75-8D84-C1CD52619095} 2013-11-14 21:27 - 2013-08-15 15:38 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 21:25 - 2011-09-20 08:30 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-14 20:09 - 2013-11-14 20:09 - 00000000 ____D C:\Users\Tolga\AppData\Local\{613082CD-E810-42E3-821A-777D354FAD90} 2013-11-14 14:08 - 2013-10-15 18:44 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-14 12:56 - 2013-11-14 12:56 - 00262144 ____N C:\Windows\Minidump\111413-22292-01.dmp 2013-11-14 08:09 - 2013-11-14 08:08 - 00000000 ____D C:\Users\Tolga\AppData\Local\{977DD278-5576-47FF-AF02-500C7B99283E} Some content of TEMP: ==================== C:\Users\Fatma\AppData\Local\Temp\avgnt.exe C:\Users\Fatma\AppData\Local\Temp\OutlookConnector.exe C:\Users\Tolga\AppData\Local\Temp\avgnt.exe C:\Users\Tolga\AppData\Local\Temp\BackupSetup.exe C:\Users\Tolga\AppData\Local\Temp\OutlookConnector.exe C:\Users\Tolga\AppData\Local\Temp\tbFree.dll C:\Users\Tolga\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-12 00:09 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2013 01 Ran by Tolga at 2013-12-14 00:28:07 Running from D:\Download Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170) Adobe Reader X (10.1.3) - Deutsch (x32 Version: 10.1.3) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122) Allgemeine Runtime Files (x86) (Version: 1.0.3.1) Avira Free Antivirus (x32 Version: 14.0.1.759) BabylonObjectInstaller (x32 Version: 2.0.0.3) BisonCam (x32 Version: 6.96.704.3.13) BisonCam (x32) CCleaner (Version: 4.01) CDBurnerXP (x32 Version: 4.4.1.3184) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000) D3DX10 (x32 Version: 15.4.2368.0902) Debugging Tools for Windows (x64) (Version: 6.12.2.633) DirectX 9.0c Extra Files (x86, x64) (Version: 1.10.06.0) DirectX for Managed Code (Version: 1.0.0.0) EyeShot (x32 Version: 5.5.9.15) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) HashCheck Shell Extension (x86-32) (x32 Version: 2.1.10.1) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2555) Java 7 Update 21 (x32 Version: 7.0.210) Java Auto Updater (x32 Version: 2.1.9.5) Java(TM) 6 Update 21 (64-bit) (Version: 6.0.210) Java(TM) 6 Update 21 (x32 Version: 6.0.210) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) Last.fm 1.5.4.27091 (x32) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Outlook Connector (x32 Version: 14.0.6123.5001) Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0) Microsoft Security Client (Version: 4.4.0304.0) Microsoft Security Essentials (Version: 4.4.304.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727) Microsoft Visual J# 2.0 Redistributable Package (x32) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 25.0.1) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) Norton PC Checkup (x32 Version: 2.0.17.20) Norton PC Checkup (x32 Version: 3.0.2.122.0) Open Command Prompt Shell Extension (x86-32) (x32 Version: 2.0.2.0) OpenOffice 4.0.0 (x32 Version: 4.00.9702) ParetoLogic PC Health Advisor (x32 Version: 3.1.0.0) Realtek Ethernet Controller Driver (x32 Version: 7.58.411.2012) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482) Sendto Xtras (x32 Version: 3.6) Skype™ 6.3 (x32 Version: 6.3.107) SUPERAntiSpyware (Version: 5.7.1008) swMSM (x32 Version: 12.0.0.1) System Requirements Lab for Intel (x32 Version: 4.5.5.0) Unlocker 1.8.9 (x32 Version: 1.8.7) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) VDownloader 3.9.1195 (x32) Visual C++ 2008 x64 Runtime - (v9.0.30729.5026) (x32 Version: 9.0.30729.5026) Visual C++ 2008 x64 Runtime - v9.0.30729.5026 (x32 Version: 9.0.30729.5026) Visual C++ 2008 x86 Runtime - (v9.0.30729.5026) (x32 Version: 9.0.30729.5026) Visual C++ 2008 x86 Runtime - v9.0.30729.5026 (x32 Version: 9.0.30729.5026) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Family Safety (Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows XP Mode (Version: 1.3.7600.16422) WinPcap 4.1.1 (x32 Version: 4.1.0.1753) WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0) ==================== Restore Points ========================= 12-12-2013 23:00:02 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02587687-8897-4FA2-9367-F7AE9CF50B38} - System32\Tasks\{2501E741-157F-4F65-AC17-487168EABCFE} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsPlugin Task: {0EFBF404-7FD8-4FD5-8CAA-14DFBF5E549C} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-13] () Task: {13A3A014-F37C-4139-B98C-BFD9C6C93F2F} - System32\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com) Task: {1459BE15-2057-43D2-BB6F-B1CA3C527B5C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd) Task: {39BDAEC4-AF35-4F26-A909-13F078D21B6B} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-01] () Task: {3D099F9E-FCE0-421C-A519-92C9326E3ABB} - System32\Tasks\PC Health Advisor => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe [2011-03-30] (ParetoLogic, Inc.) Task: {74BA115C-937B-4BCC-9172-DE6928CB0898} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000Core => C:\Users\Tolga\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-16] (Facebook Inc.) Task: {8051941D-89AE-48D2-98D3-683C9474FEC9} - System32\Tasks\ParetoLogic Registration3 => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll [2011-03-30] () Task: {8F44D643-3ABB-4524-BB37-A42BFF9927A6} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated) Task: {959BE25F-1912-4E43-A9B0-4A5E7A03E2B7} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe <==== ATTENTION Task: {9BD02592-0F66-4DFF-8469-AAEF1C166534} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000UA => C:\Users\Tolga\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-16] (Facebook Inc.) Task: {BCB9E27A-257B-451E-8BF1-F0EC1CD90B44} - System32\Tasks\DealPly => C:\Users\Tolga\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {DC6AC496-6E6B-4887-B051-B30D530A14FA} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe Task: {EB6CF94B-CA86-4953-888A-889AD3AD37E3} - System32\Tasks\ParetoLogic Update Version3 => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [2011-03-30] (ParetoLogic Inc.) Task: {FC8B30FB-962D-4AF4-898F-A5E68582DC4C} - System32\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com) Task: {FE69C469-1503-4EBE-916C-AB2075EBF39E} - System32\Tasks\PC Health Advisor Defrag => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe [2011-03-30] (ParetoLogic, Inc.) Task: {FEC17463-7D00-4944-98FC-9F6C5BF29D71} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe Task: {FEDB7978-A91C-4E67-AD8A-E98CCB328E8C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Dealply.job => C:\Users\Tolga\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000Core.job => C:\Users\Tolga\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2041661862-590815683-2126392723-1000UA.job => C:\Users\Tolga\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll Task: C:\Windows\Tasks\ParetoLogic Update Version3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe Task: C:\Windows\Tasks\PC Health Advisor Defrag.job => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe Task: C:\Windows\Tasks\PC Health Advisor.job => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 07e39f52-7a7f-4625-ae94-40f2cc0a57ec.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 34e15d68-0be9-43b7-9ad5-7bd86f91c420.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-15 18:44 - 2013-09-30 10:01 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2012-07-25 02:31 - 2006-12-05 18:42 - 00028672 _____ () C:\Windows\BisonCam\KBHookDLL.dll 2011-09-20 08:32 - 2010-03-08 20:55 - 00004608 _____ () C:\Program Files (x86)\Unlocker\UnlockerHook.dll 2013-11-15 22:35 - 2013-11-15 22:35 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (12/13/2013 11:03:29 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:24 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:19 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:14 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:09 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:04 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:59 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:54 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:49 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:44 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007041d System errors: ============= Error: (12/14/2013 00:28:01 AM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/14/2013 00:27:56 AM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/14/2013 00:27:52 AM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/14/2013 00:27:47 AM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/14/2013 00:27:43 AM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/13/2013 11:58:27 PM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/13/2013 11:58:22 PM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/13/2013 11:58:18 PM) (Source: Disk) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/13/2013 11:03:29 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (12/13/2013 11:03:29 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Live ID Sign-in Assistant erreicht. Microsoft Office Sessions: ========================= Error: (12/13/2013 11:03:29 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:24 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:19 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:14 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:09 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:03:04 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:59 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:54 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:49 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d Error: (12/13/2013 11:02:44 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007041d ==================== Memory info =========================== Percentage of memory in use: 48% Total physical RAM: 4028.87 MB Available physical RAM: 2057.3 MB Total Pagefile: 8055.92 MB Available Pagefile: 5839.95 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:48.83 GB) (Free:6.07 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:249.25 GB) (Free:198.36 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 78C419BD) Partition 1: (Active) - (Size=49 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=249 GB) - (Type=OF Extended) ==================== End Of Log ============================ Geändert von Ozz2k6 (14.12.2013 um 00:40 Uhr) |
Themen zu Win 7 nach Softwareaktualisierung langsam,WINTrust.dll fehlt |
.dll, adblock, aktiviere, aktivieren, allgemeine, allgemeinen, alten, andere, ccleaner, defender, freemium, hallo zusammen, installiert, langsam, laptop, minidump, nicht mehr, nicht öffnen, plug-in, problem, probleme, programme, search the web, skype, software, update, vcredist, win, windows, windows update, zusammen, öffnen |