|
Log-Analyse und Auswertung: Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert TrojanerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
15.01.2014, 12:08 | #16 |
| Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner Hi, IE ist aktualisiert. Allerdings habe ich seit der Installation des Tools zum Defragentieren ein neues Problem: Ich muss irgendein Programm namens Conduit mitinstalliert haben. Dieses hat mir Einstellungen im Firefox, wie de Suchmaschine oder die Startseite verstellt und sich dagegen gewehrt, wenn ich die Einstellungen wieder ändern wollte. Und vor allem: Facebook funktioniert nicht mehr. Die Seite ist komplett weiß mit einzelnen Links auf der linken Seite (siehe Anhang) Besteht da ein Zusammenhang? Hier die Logfile gruß kallenator FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 Ran by flo (administrator) on FLO-LAPTOP on 15-01-2014 12:00:33 Running from C:\Users\flo\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official downoad link fo FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (ASUS) C:\Windows\AsScrPro.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe (Futuredial Inc.) C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe () C:\Windows\Samsung\PanelMgr\caller64.exe (Dropbox, Inc.) C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Deutsche Telekom AG) C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] () HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-04-18] (Realtek Semiconductor) HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2922496 2011-06-16] (Eastman Kodak Company) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] () HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-10-28] () HKLM-x32\...\Run: [ASUS Sync Loader] - C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe [638976 2012-06-15] (Futuredial Inc.) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKLM-x32\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC) HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.) MountPoints2: {cf467c60-55b4-11e3-bbfc-f46d041e025e} - F:\SETUP.EXE AppInit_DLLs: c:\windows\system32\nvinitx.dll [226920 2011-04-18] (NVIDIA Corporation) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk ShortcutTarget: Mediencenter.lnk -> C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://asus.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD5EF5A6A1C9FCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&q={searchTerms}&SSPV= SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Dragon NaturallySpeaking Rich Internet Application Support - Extension - {73A89C60-CF59-4EC7-9215-9B7EF05ECEA4} - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ieShim.dll (Nuance Communications, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - No File BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ssl.swisslife-select.de/dana-cached/sc/JuniperSetupClient.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default FF Homepage: https://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: nuance.com/DragonRIAPlugin - C:\PROGRA~2\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.) FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF SearchPlugin: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\searchplugins\conduit-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxTube - Unblock YouTube - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\ich@maltegoetz.de [2013-12-18] FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-27] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20] FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-27] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-07] FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi FF Extension: Dragon NaturallySpeaking Rich Internet Application Support - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013-10-15] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR DefaultSearchProvider: Search the web (Softonic) CHR DefaultSearchURL: hxxp://www.google.com CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\gcswf32.dll () CHR Plugin: (Shockwave Flash) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (ProxTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.2_0 [2012-07-03] CHR Extension: (YouTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 [2012-03-05] CHR Extension: (Google Search) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 [2012-04-01] CHR Extension: (Gmail) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2012-01-08] CHR HKLM-x32\...\Chrome\Extension: [mikhcaiakabeeokmenglcdebplfdjicn] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\chromeShim.crx [2013-10-15] ==================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-08-02] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-25] (Disc Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( ) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-08-02] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-10-28] (Samsung Electronics) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] () S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.) S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-15 11:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-01-15 11:39 - 2014-01-15 11:51 - 00010819 _____ C:\Windows\IE11_main.log 2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe 2014-01-14 22:39 - 2014-01-14 23:38 - 00000000 _____ C:\autoexec.bat 2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-14 22:38 - 2014-01-14 23:41 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe 2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics 2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd ) C:\Users\flo\Downloads\disk-defrag-setup.exe 2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt 2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe 2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe 2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-13 00:21 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe 2014-01-10 21:59 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps 2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt 2014-01-10 21:48 - 2014-01-15 12:00 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion 2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt 2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe 2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt 2014-01-10 21:22 - 2014-01-10 21:23 - 00000000 ____D C:\AdwCleaner 2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe 2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log 2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt 2014-01-09 21:47 - 2014-01-09 21:48 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp 2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump 2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe 2014-01-09 21:34 - 2014-01-09 21:33 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt 2014-01-09 21:34 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt 2014-01-09 21:32 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt 2014-01-09 21:30 - 2014-01-15 12:00 - 00019767 _____ C:\Users\flo\Downloads\FRST.txt 2014-01-09 21:30 - 2014-01-15 12:00 - 00000000 ____D C:\FRST 2014-01-09 21:29 - 2014-01-15 12:00 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe 2014-01-09 21:28 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log 2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable 2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe 2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-01-08 14:12 - 2010-12-13 14:12 - 00252712 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2014-01-07 14:31 - 2014-01-10 21:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-17 10:37 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-17 10:37 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-17 10:37 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-17 10:37 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-17 10:29 - 2013-12-17 10:31 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls ==================== One Month Modified Files and Folders ======= 2014-01-15 12:01 - 2014-01-09 21:30 - 00019767 _____ C:\Users\flo\Downloads\FRST.txt 2014-01-15 12:00 - 2014-01-10 21:48 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion 2014-01-15 12:00 - 2014-01-09 21:30 - 00000000 ____D C:\FRST 2014-01-15 12:00 - 2014-01-09 21:29 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe 2014-01-15 11:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-15 11:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-15 11:58 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Dropbox 2014-01-15 11:56 - 2013-10-06 21:46 - 00000000 ___RD C:\Users\flo\Mediencenter 2014-01-15 11:56 - 2012-01-26 15:39 - 00000000 ___RD C:\Users\flo\Dropbox 2014-01-15 11:55 - 2013-01-11 22:11 - 00001427 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-15 11:53 - 2011-12-23 16:24 - 00000000 ____D C:\ProgramData\Kodak 2014-01-15 11:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-15 11:53 - 2009-07-14 05:51 - 00119564 _____ C:\Windows\setupact.log 2014-01-15 11:52 - 2011-04-18 10:20 - 01728150 _____ C:\Windows\WindowsUpdate.log 2014-01-15 11:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-15 11:51 - 2014-01-15 11:39 - 00010819 _____ C:\Windows\IE11_main.log 2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe 2014-01-15 11:12 - 2012-06-11 18:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-15 08:20 - 2011-04-18 11:26 - 00725190 _____ C:\Windows\PFRO.log 2014-01-14 23:41 - 2014-01-14 22:38 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-14 23:38 - 2014-01-14 22:39 - 00000000 _____ C:\autoexec.bat 2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe 2014-01-14 22:10 - 2011-04-18 12:01 - 00001442 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-14 21:03 - 2013-11-28 20:15 - 00001515 _____ C:\Users\flo\AppData\Roaming\SAS7_000.DAT 2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics 2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd ) C:\Users\flo\Downloads\disk-defrag-setup.exe 2014-01-14 11:18 - 2009-08-04 10:51 - 00708510 _____ C:\Windows\system32\perfh007.dat 2014-01-14 11:18 - 2009-08-04 10:51 - 00152114 _____ C:\Windows\system32\perfc007.dat 2014-01-14 11:18 - 2009-07-14 06:13 - 01644172 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-13 19:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt 2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe 2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe 2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe 2014-01-10 21:59 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps 2014-01-10 21:57 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt 2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt 2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe 2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt 2014-01-10 21:23 - 2014-01-10 21:22 - 00000000 ____D C:\AdwCleaner 2014-01-10 21:23 - 2014-01-07 14:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-10 21:23 - 2012-12-12 10:07 - 00000000 ____D C:\ProgramData\Uniblue 2014-01-10 21:23 - 2011-06-20 20:48 - 00000000 ____D C:\ProgramData\ICQ 2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe 2014-01-10 21:21 - 2011-06-20 20:28 - 00000000 ___RD C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-10 21:20 - 2012-01-26 15:39 - 00001017 _____ C:\Users\flo\Desktop\Dropbox.lnk 2014-01-10 21:20 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log 2014-01-09 22:10 - 2014-01-09 21:28 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log 2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt 2014-01-09 21:48 - 2014-01-09 21:47 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp 2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump 2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe 2014-01-09 21:33 - 2014-01-09 21:34 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt 2014-01-09 21:33 - 2014-01-09 21:34 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt 2014-01-09 21:33 - 2014-01-09 21:32 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt 2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable 2014-01-09 21:28 - 2011-06-20 20:27 - 00000000 ____D C:\Users\flo 2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe 2014-01-09 20:49 - 2012-01-11 14:50 - 00000000 ____D C:\Program Files (x86)\Opera 2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-01-09 20:45 - 2011-06-20 20:53 - 00000000 ____D C:\Users\flo\AppData\Roaming\DVDVideoSoft 2014-01-08 14:13 - 2012-11-13 18:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-08 12:57 - 2013-07-03 15:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak 2014-01-07 22:52 - 2011-11-01 20:04 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-12-18 12:00 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-18 11:44 - 2009-07-14 05:45 - 00467312 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-17 10:37 - 2011-10-16 13:35 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-17 10:31 - 2013-12-17 10:29 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls Some content of TEMP: ==================== C:\Users\flo\AppData\Local\Temp\nsd8E11.exe C:\Users\flo\AppData\Local\Temp\nso69FD.exe C:\Users\flo\AppData\Local\Temp\nso6C20.exe C:\Users\flo\AppData\Local\Temp\nst67AB.exe C:\Users\flo\AppData\Local\Temp\nsuAD76.exe C:\Users\flo\AppData\Local\Temp\nsuB0D1.exe C:\Users\flo\AppData\Local\Temp\nszA950.exe C:\Users\flo\AppData\Local\Temp\SHSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 12:05 ==================== End Of Log ============================ --- --- --- |
15.01.2014, 14:59 | #17 | ||
/// Malwareteam | Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert TrojanerZitat:
Zitat:
Schritt 1: Sollte den Conduit erledigen: Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2: poste ein neues FRST Logfile
__________________ |
15.01.2014, 16:21 | #18 |
| Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner hi,
__________________im IE funktioniert es. Nutze normalerweise Firefox. Da geht es nicht. Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 15/01/2014 um 16:05:31 # Aktualisiert 12/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : flo - FLO-LAPTOP # Gestartet von : C:\Users\flo\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf Datei Gelöscht : C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\searchplugins\conduit-search.xml ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : HKCU\Software\FLEXnet ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [17265 octets] - [10/01/2014 21:22:18] AdwCleaner[R1].txt - [1835 octets] - [15/01/2014 16:03:56] AdwCleaner[S0].txt - [15659 octets] - [10/01/2014 21:23:24] AdwCleaner[S1].txt - [1452 octets] - [15/01/2014 16:05:31] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1512 octets] ########## FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 Ran by flo (administrator) on FLO-LAPTOP on 15-01-2014 16:20:06 Running from C:\Users\flo\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official downoad link fo FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe (Deutsche Telekom AG) C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe (Futuredial Inc.) C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin () C:\Windows\Samsung\PanelMgr\caller64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] () HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-04-18] (Realtek Semiconductor) HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2922496 2011-06-16] (Eastman Kodak Company) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] () HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-10-28] () HKLM-x32\...\Run: [ASUS Sync Loader] - C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe [638976 2012-06-15] (Futuredial Inc.) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKLM-x32\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC) HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.) MountPoints2: {cf467c60-55b4-11e3-bbfc-f46d041e025e} - F:\SETUP.EXE AppInit_DLLs: c:\windows\system32\nvinitx.dll [226920 2011-04-18] (NVIDIA Corporation) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk ShortcutTarget: Mediencenter.lnk -> C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG) Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://asus.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD5EF5A6A1C9FCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Dragon NaturallySpeaking Rich Internet Application Support - Extension - {73A89C60-CF59-4EC7-9215-9B7EF05ECEA4} - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ieShim.dll (Nuance Communications, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - No File BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ssl.swisslife-select.de/dana-cached/sc/JuniperSetupClient.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default FF Homepage: https://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: nuance.com/DragonRIAPlugin - C:\PROGRA~2\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.) FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxTube - Unblock YouTube - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\ich@maltegoetz.de [2013-12-18] FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-27] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20] FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-27] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-07] FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi FF Extension: Dragon NaturallySpeaking Rich Internet Application Support - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013-10-15] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR DefaultSearchProvider: Search the web (Softonic) CHR DefaultSearchURL: hxxp://www.google.com CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\gcswf32.dll () CHR Plugin: (Shockwave Flash) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Extension: (ProxTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.2_0 [2012-07-03] CHR Extension: (YouTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 [2012-03-05] CHR Extension: (Google Search) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 [2012-04-01] CHR Extension: (Gmail) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2012-01-08] CHR HKLM-x32\...\Chrome\Extension: [mikhcaiakabeeokmenglcdebplfdjicn] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\chromeShim.crx [2013-10-15] ==================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-08-02] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-25] (Disc Soft Ltd) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( ) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-08-02] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-10-28] (Samsung Electronics) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] () S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.) S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-15 16:14 - 2014-01-15 16:14 - 00001592 _____ C:\Users\flo\Desktop\AdwCleaner[S1].txt 2014-01-15 16:03 - 2014-01-15 16:03 - 01236282 _____ C:\Users\flo\Desktop\adwcleaner.exe 2014-01-15 12:01 - 2014-01-15 12:01 - 00057407 _____ C:\Users\flo\Desktop\FRST3.txt 2014-01-15 11:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-01-15 11:39 - 2014-01-15 11:51 - 00010819 _____ C:\Windows\IE11_main.log 2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe 2014-01-14 22:39 - 2014-01-14 23:38 - 00000000 _____ C:\autoexec.bat 2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-14 22:38 - 2014-01-14 23:41 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe 2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics 2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd ) C:\Users\flo\Downloads\disk-defrag-setup.exe 2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt 2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe 2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe 2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-13 00:21 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe 2014-01-10 21:59 - 2014-01-15 14:02 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps 2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt 2014-01-10 21:48 - 2014-01-15 12:00 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion 2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt 2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe 2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt 2014-01-10 21:22 - 2014-01-15 16:05 - 00000000 ____D C:\AdwCleaner 2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe 2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log 2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt 2014-01-09 21:47 - 2014-01-09 21:48 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp 2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump 2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe 2014-01-09 21:34 - 2014-01-09 21:33 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt 2014-01-09 21:34 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt 2014-01-09 21:32 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt 2014-01-09 21:30 - 2014-01-15 16:20 - 00019122 _____ C:\Users\flo\Downloads\FRST.txt 2014-01-09 21:30 - 2014-01-15 12:00 - 00000000 ____D C:\FRST 2014-01-09 21:29 - 2014-01-15 12:00 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe 2014-01-09 21:28 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log 2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable 2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe 2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-01-08 14:12 - 2010-12-13 14:12 - 00252712 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2014-01-07 14:31 - 2014-01-10 21:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-17 10:37 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-17 10:37 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-17 10:37 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-17 10:37 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-17 10:29 - 2013-12-17 10:31 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls ==================== One Month Modified Files and Folders ======= 2014-01-15 16:20 - 2014-01-09 21:30 - 00019122 _____ C:\Users\flo\Downloads\FRST.txt 2014-01-15 16:16 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Dropbox 2014-01-15 16:15 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-15 16:15 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-15 16:14 - 2014-01-15 16:14 - 00001592 _____ C:\Users\flo\Desktop\AdwCleaner[S1].txt 2014-01-15 16:14 - 2013-10-06 21:46 - 00000000 ___RD C:\Users\flo\Mediencenter 2014-01-15 16:14 - 2012-01-26 15:39 - 00000000 ___RD C:\Users\flo\Dropbox 2014-01-15 16:12 - 2012-06-11 18:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-15 16:07 - 2011-12-23 16:24 - 00000000 ____D C:\ProgramData\Kodak 2014-01-15 16:07 - 2011-04-18 10:20 - 01743487 _____ C:\Windows\WindowsUpdate.log 2014-01-15 16:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-15 16:07 - 2009-07-14 05:51 - 00119620 _____ C:\Windows\setupact.log 2014-01-15 16:05 - 2014-01-10 21:22 - 00000000 ____D C:\AdwCleaner 2014-01-15 16:03 - 2014-01-15 16:03 - 01236282 _____ C:\Users\flo\Desktop\adwcleaner.exe 2014-01-15 14:02 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps 2014-01-15 13:29 - 2011-10-16 13:35 - 00000000 ____D C:\Users\flo\AppData\Local\Microsoft Help 2014-01-15 12:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-15 12:01 - 2014-01-15 12:01 - 00057407 _____ C:\Users\flo\Desktop\FRST3.txt 2014-01-15 12:00 - 2014-01-10 21:48 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion 2014-01-15 12:00 - 2014-01-09 21:30 - 00000000 ____D C:\FRST 2014-01-15 12:00 - 2014-01-09 21:29 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe 2014-01-15 11:55 - 2013-01-11 22:11 - 00001427 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-15 11:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2014-01-15 11:51 - 2014-01-15 11:39 - 00010819 _____ C:\Windows\IE11_main.log 2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe 2014-01-15 08:20 - 2011-04-18 11:26 - 00725190 _____ C:\Windows\PFRO.log 2014-01-14 23:41 - 2014-01-14 22:38 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-14 23:38 - 2014-01-14 22:39 - 00000000 _____ C:\autoexec.bat 2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe 2014-01-14 22:10 - 2011-04-18 12:01 - 00001442 _____ C:\Windows\system32\ServiceFilter.ini 2014-01-14 21:03 - 2013-11-28 20:15 - 00001515 _____ C:\Users\flo\AppData\Roaming\SAS7_000.DAT 2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics 2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd ) C:\Users\flo\Downloads\disk-defrag-setup.exe 2014-01-14 11:18 - 2009-08-04 10:51 - 00708510 _____ C:\Windows\system32\perfh007.dat 2014-01-14 11:18 - 2009-08-04 10:51 - 00152114 _____ C:\Windows\system32\perfc007.dat 2014-01-14 11:18 - 2009-07-14 06:13 - 01644172 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt 2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe 2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe 2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe 2014-01-10 21:57 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt 2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt 2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe 2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT 2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt 2014-01-10 21:23 - 2014-01-07 14:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-10 21:23 - 2012-12-12 10:07 - 00000000 ____D C:\ProgramData\Uniblue 2014-01-10 21:23 - 2011-06-20 20:48 - 00000000 ____D C:\ProgramData\ICQ 2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe 2014-01-10 21:21 - 2011-06-20 20:28 - 00000000 ___RD C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-10 21:20 - 2012-01-26 15:39 - 00001017 _____ C:\Users\flo\Desktop\Dropbox.lnk 2014-01-10 21:20 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log 2014-01-09 22:10 - 2014-01-09 21:28 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log 2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt 2014-01-09 21:48 - 2014-01-09 21:47 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp 2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump 2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe 2014-01-09 21:33 - 2014-01-09 21:34 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt 2014-01-09 21:33 - 2014-01-09 21:34 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt 2014-01-09 21:33 - 2014-01-09 21:32 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt 2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable 2014-01-09 21:28 - 2011-06-20 20:27 - 00000000 ____D C:\Users\flo 2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe 2014-01-09 20:49 - 2012-01-11 14:50 - 00000000 ____D C:\Program Files (x86)\Opera 2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-01-09 20:45 - 2011-06-20 20:53 - 00000000 ____D C:\Users\flo\AppData\Roaming\DVDVideoSoft 2014-01-08 14:13 - 2012-11-13 18:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-08 12:57 - 2013-07-03 15:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak 2014-01-07 22:52 - 2011-11-01 20:04 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-12-18 12:00 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-18 11:44 - 2009-07-14 05:45 - 00467312 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-17 10:37 - 2011-10-16 13:35 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-17 10:31 - 2013-12-17 10:29 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls Some content of TEMP: ==================== C:\Users\flo\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\flo\AppData\Local\Temp\nsd8E11.exe C:\Users\flo\AppData\Local\Temp\nso69FD.exe C:\Users\flo\AppData\Local\Temp\nso6C20.exe C:\Users\flo\AppData\Local\Temp\nst67AB.exe C:\Users\flo\AppData\Local\Temp\nsuAD76.exe C:\Users\flo\AppData\Local\Temp\nsuB0D1.exe C:\Users\flo\AppData\Local\Temp\nszA950.exe C:\Users\flo\AppData\Local\Temp\Quarantine.exe C:\Users\flo\AppData\Local\Temp\SHSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 12:05 ==================== End Of Log ============================ gruß kallenator |
16.01.2014, 12:25 | #19 |
/// Malwareteam | Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner Installiere dir den Firefox neu. Wenn sonst nichts mehr auffällig ist: Die Reihenfolge ist hier entscheidend.
|
16.01.2014, 15:56 | #20 |
| Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner hi, alles erledigt. Nur das Problem mit Facebook bleibt. Wie gesagt: Komplett weiße Seite mit einzelnen Links. Auf anderen Seiten ist mir das bisher nicht aufgefallen. Gruß Kallenator alles roger. habe firefox zurück gesetzt. jetzt gehts es wieder |
16.01.2014, 16:03 | #21 |
/// Malwareteam | Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert TrojanerWunderbar dein System ist soweit ich das sehen kann sauber. Hier noch ein paar Tipps zur Absicherung deines Systems. Benutzerkonto Einstellungen: Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt. Solltest du Hilfe bei der Erstellung eines "eingeschränkten Kontos" benötigen helfe ich dir gern weiter. Systemupdates: Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Antivirensoftware Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen alternatives Browsen Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen.
__________________ --> Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner |
Themen zu Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner |
4d36e972-e325-11ce-bfc1-08002be10318, adblock, auslastung, browser, computer, desktop, error, excel, firefox, flash player, focus, homepage, js/adware.yontoo.a, js/adware.yontoo.b, mozilla, msiinstaller, newtab, plug-in, pup.optional.opencandy, realtek, registry, richtlinie, security, smartbar, software, svchost.exe, system, system error, tippen, trojaner, usb, win32/adware.yontoo.b, windows, yahoo community smartbar, zugemüllt |