| |
| |||||||
Log-Analyse und Auswertung: Viel zu viel Werbung -.- Windows 7 Acer LaptopWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
14.01.2014, 14:53
| #1 |
| /// Malwareteam   |  Viel zu viel Werbung -.- Windows 7 Acer Laptop Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist. Vista und Win7 User Alle Tools mit Rechtsklick "als Administrator ausführen" starten. Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
|
14.01.2014, 15:08
| #2 | |
 | Viel zu viel Werbung -.- Windows 7 Acer LaptopZitat:
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-01-2014 02
Ran by aceraspir (administrator) on ACERASPIR-PC on 14-01-2014 14:59:16
Running from C:\Users\aceraspir\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Users\aceraspir\AppData\Local\Lollipop\Lollipop.exe
(Smartbar) C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Mobogenie\mgusb.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [761536 2013-12-26] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [lollipop] - c:\users\aceraspir\appdata\local\lollipop\lollipop.exe [3507200 2014-01-09] ()
HKCU\...\Run: [NextLive] - C:\Users\aceraspir\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.exe [20760 2013-11-21] (Smartbar)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()
Startup: C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=hp&fr=linkury-tb&installDate=09/01/2014&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x63BFB61C6FF8CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=09/01/2014&type=hp1000
BHO: Plus-HD-1.3 - {11111111-1111-1111-1111-110311121157} - C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-bho64.dll (Plus HD)
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho64.dll (Feven)
BHO: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Re-Markable - {068855c0-09c1-4781-b8ec-f1418f5ad60c} - C:\Program Files (x86)\Re-Markable\150.dll ()
BHO-x32: Plus-HD-1.3 - {11111111-1111-1111-1111-110311121157} - C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-bho.dll (Plus HD)
BHO-x32: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files (x86)\Feven 2.2\Feven 2.2-bho.dll (Feven)
BHO-x32: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://www.nationzoom.com/?type=hp&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634", "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=866a3983-32e6-b0c5-a434-da6a02cd91ad&searchtype=hp&fr=linkury-tb&installDate=09/01/2014&type=hp1000"
CHR Extension: (Google Docs) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-12-16]
CHR Extension: (Google Drive) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-12-16]
CHR Extension: (Feven 2.2) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhbagplpkkoeifmpmpdaieomnggppmo\1.26.16_0 [2014-01-14]
CHR Extension: (YouTube) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-12-16]
CHR Extension: (Extended Protection) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0 [2014-01-09]
CHR Extension: (Google Search) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-12-16]
CHR Extension: (AdBlock) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 [2013-12-20]
CHR Extension: (Plus-HD-1.3) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.121_0 [2013-12-16]
CHR Extension: (Google Wallet) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-20]
CHR Extension: (Widget context) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\ombmmloebnfnpehgjnmkcgoegfachobp\3.0_0 [2014-01-14]
CHR Extension: (Gmail) - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 [2013-12-16]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\aceraspir\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-09]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.nationzoom.com/?type=sc&ts=1389254511&from=tugs&uid=WDCXWD7500BPVT-22HXZT3_WD-WX21A91D4634D4634
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
S2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [452264 2013-12-25] (Elex do Brasil Participações Ltda)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-09] (Cherished Technololgy LIMITED)
S2 CltMngSvc; C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe [x]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
R3 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [201216 2013-12-25] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [44032 2013-12-25] (Elex do Brasil Participações Ltda)
R3 L1C; C:\Windows\System32\DRIVERS\L1C60x64.sys [76400 2011-01-25] (Atheros Communications, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-14 14:59 - 2014-01-14 15:00 - 00016613 _____ C:\Users\aceraspir\Downloads\FRST.txt
2014-01-14 14:59 - 2014-01-14 14:59 - 00000000 ____D C:\FRST
2014-01-14 14:58 - 2014-01-14 14:58 - 02075648 _____ (Farbar) C:\Users\aceraspir\Downloads\FRST64.exe
2014-01-13 21:51 - 2014-01-14 14:14 - 00000168 _____ C:\Windows\setupact.log
2014-01-13 21:51 - 2014-01-13 21:51 - 00000826 _____ C:\Windows\PFRO.log
2014-01-13 21:51 - 2014-01-13 21:51 - 00000000 _____ C:\Windows\setuperr.log
2014-01-13 18:27 - 2014-01-13 18:27 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-13 18:26 - 2014-01-13 18:31 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-13 18:26 - 2014-01-13 18:26 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-13 18:26 - 2014-01-13 18:26 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-13 18:26 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-01-13 18:24 - 2014-01-13 18:25 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\aceraspir\Downloads\spybot-2.2.25.exe
2014-01-13 18:09 - 2014-01-13 18:09 - 00002780 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-13 18:09 - 2014-01-13 18:09 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-13 18:09 - 2014-01-13 18:09 - 00000000 ____D C:\Program Files\CCleaner
2014-01-13 18:07 - 2014-01-13 18:07 - 03571656 _____ (Piriform Ltd) C:\Users\aceraspir\Downloads\ccsetup409_slim.exe
2014-01-13 17:49 - 2014-01-13 17:49 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Mozilla
2014-01-13 08:40 - 2014-01-13 08:40 - 00000000 ____D C:\Users\aceraspir\restore
2014-01-13 08:36 - 2014-01-13 17:27 - 00000000 ____D C:\ProgramData\tmp
2014-01-13 08:36 - 2014-01-13 17:15 - 00000000 ____D C:\ProgramData\hps
2014-01-13 08:28 - 2014-01-13 17:47 - 00000000 ____D C:\Program Files (x86)\Pixum
2014-01-13 08:27 - 2014-01-13 08:27 - 01628432 _____ C:\Users\aceraspir\Downloads\setup_Pixum_Fotobuch.exe
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\ATI
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\Users\aceraspir\AppData\Local\ATI
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\ProgramData\ATI
2014-01-09 17:51 - 2014-01-09 17:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-09 17:51 - 2014-01-09 17:51 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-09 17:49 - 2014-01-09 17:49 - 00915368 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\chromeinstall-7u45 (1).exe
2014-01-09 09:09 - 2014-01-09 09:10 - 00002642 _____ C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-09 09:09 - 2014-01-09 09:09 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Smartbar
2014-01-09 09:08 - 2014-01-09 09:08 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\TuneUp Software
2014-01-09 09:06 - 2014-01-09 09:08 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-09 09:06 - 2014-01-09 09:06 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-09 09:05 - 2014-01-09 09:05 - 00001398 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-09 09:05 - 2014-01-09 09:05 - 00001239 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-09 09:04 - 2014-01-09 09:05 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\DVDVideoSoft
2014-01-09 09:04 - 2014-01-09 09:05 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-09 09:04 - 2014-01-09 09:04 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\OpenCandy
2014-01-09 09:02 - 2014-01-14 14:15 - 00002108 _____ C:\Windows\Tasks\Feven 2.2-chromeinstaller.job
2014-01-09 09:02 - 2014-01-14 14:15 - 00002030 _____ C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job
2014-01-09 09:02 - 2014-01-14 14:15 - 00001324 _____ C:\Windows\Tasks\Feven 2.2-updater.job
2014-01-09 09:02 - 2014-01-14 14:15 - 00001276 _____ C:\Windows\Tasks\Feven 2.2-codedownloader.job
2014-01-09 09:02 - 2014-01-14 14:15 - 00001148 _____ C:\Windows\Tasks\Feven 2.2-enabler.job
2014-01-09 09:02 - 2014-01-14 14:15 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\newnext.me
2014-01-09 09:02 - 2014-01-14 14:13 - 00002727 _____ C:\Users\aceraspir\daemonprocess.txt
2014-01-09 09:02 - 2014-01-09 09:17 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:03 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00004354 _____ C:\Windows\System32\Tasks\Feven 2.2-updater
2014-01-09 09:02 - 2014-01-09 09:02 - 00004306 _____ C:\Windows\System32\Tasks\Feven 2.2-codedownloader
2014-01-09 09:02 - 2014-01-09 09:02 - 00004178 _____ C:\Windows\System32\Tasks\Feven 2.2-enabler
2014-01-09 09:02 - 2014-01-09 09:02 - 00001019 _____ C:\Users\aceraspir\Desktop\Mobogenie.lnk
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\Documents\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Local\genienext
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Local\cache
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\.android
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\ProgramData\WPM
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Program Files (x86)\Feven 2.2
2014-01-09 09:01 - 2014-01-14 14:59 - 00001944 _____ C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-09 09:01 - 2014-01-14 14:58 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Lollipop
2014-01-09 09:01 - 2014-01-14 14:15 - 00000402 _____ C:\Windows\Tasks\Re-Markable Update.job
2014-01-09 09:01 - 2014-01-09 09:01 - 00003058 _____ C:\Windows\System32\Tasks\Re-Markable Update
2014-01-09 09:01 - 2014-01-09 09:01 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2014-01-09 09:00 - 2014-01-09 09:00 - 00474528 _____ C:\Users\aceraspir\Downloads\free-youtube-to-mp3-converter.exe
2014-01-09 08:28 - 2014-01-09 08:28 - 00000000 ____D C:\Users\aceraspir\Documents\NeroVision
2014-01-05 22:58 - 2014-01-06 11:12 - 02225709 _____ C:\Users\aceraspir\Downloads\Firmware_bs_8859_g_E_.rar
2014-01-05 20:42 - 2014-01-09 22:33 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Skype
2014-01-05 20:42 - 2014-01-05 20:42 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-05 20:42 - 2014-01-05 20:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-05 20:42 - 2014-01-05 20:42 - 00000000 ____D C:\ProgramData\Skype
2014-01-05 20:40 - 2014-01-05 20:41 - 35095200 _____ (Skype Technologies S.A.) C:\Users\aceraspir\Downloads\Skype611SetupFull.exe
2013-12-29 12:36 - 2013-12-29 12:36 - 00000000 ____D C:\Users\aceraspir\Documents\Nero Home
2013-12-26 00:32 - 2013-12-26 00:32 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-26 00:32 - 2013-12-26 00:32 - 00000000 ____D C:\Program Files\Java
2013-12-26 00:30 - 2013-12-26 00:31 - 30694824 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\jre-7u45-windows-x64.exe
2013-12-26 00:25 - 2013-12-26 00:25 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-26 00:15 - 2013-12-26 00:18 - 00000000 ____D C:\Users\aceraspir\AppData\Local\DieMcSiedler-Software
2013-12-26 00:03 - 2014-01-09 17:52 - 00000000 ____D C:\ProgramData\Oracle
2013-12-26 00:03 - 2013-12-26 00:41 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\.technic
2013-12-26 00:03 - 2013-12-26 00:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-26 00:00 - 2013-12-26 00:00 - 00915368 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\chromeinstall-7u45.exe
2013-12-23 15:22 - 2013-12-23 15:22 - 00000000 ____D C:\Users\aceraspir\Downloads\Firmware_WD_9545_A_A
2013-12-23 14:52 - 2013-12-23 14:52 - 00001305 _____ C:\Users\aceraspir\Desktop\Continue Keepass.lnk
2013-12-20 19:28 - 2014-01-14 14:22 - 00234530 _____ C:\Windows\WindowsUpdate.log
2013-12-19 18:25 - 2013-12-19 18:25 - 00000425 _____ C:\Windows\BRWMARK.INI
2013-12-17 17:02 - 2013-12-17 17:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-12-17 15:30 - 2013-12-22 18:08 - 00000076 _____ C:\Users\aceraspir\AppData\default.pls
2013-12-16 20:21 - 2013-12-16 20:21 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\eCyber
2013-12-16 19:48 - 2014-01-09 09:01 - 00002461 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-16 19:47 - 2014-01-14 14:58 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-16 19:47 - 2014-01-14 14:15 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-16 19:47 - 2013-12-16 19:53 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-16 19:47 - 2013-12-16 19:53 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-16 19:47 - 2013-12-16 19:48 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Google
2013-12-16 19:47 - 2013-12-16 19:48 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-16 19:47 - 2013-12-16 19:47 - 00001780 _____ C:\Users\Public\Desktop\YAC.lnk
2013-12-16 19:47 - 2013-12-16 19:47 - 00000000 ____D C:\Windows\system32\log
2013-12-16 19:46 - 2014-01-14 14:14 - 00000000 ____D C:\Program Files (x86)\iSafe
2013-12-16 19:46 - 2014-01-13 17:35 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\iSafe
2013-12-16 19:46 - 2013-12-20 07:27 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-16 19:46 - 2013-12-16 19:46 - 00001087 _____ C:\Users\aceraspir\Desktop\MyPC Backup.lnk
2013-12-16 19:46 - 2013-12-16 19:46 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-12-16 19:45 - 2014-01-14 14:15 - 00002112 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2013-12-16 19:45 - 2014-01-14 14:15 - 00001984 _____ C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
2013-12-16 19:45 - 2014-01-14 14:15 - 00001336 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job
2013-12-16 19:45 - 2014-01-14 14:15 - 00001238 _____ C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
2013-12-16 19:45 - 2014-01-14 14:15 - 00001138 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2013-12-16 19:45 - 2013-12-16 19:45 - 00004366 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-updater
2013-12-16 19:45 - 2013-12-16 19:45 - 00004268 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
2013-12-16 19:45 - 2013-12-16 19:45 - 00004168 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
2013-12-16 19:45 - 2013-12-16 19:45 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-12-16 19:44 - 2013-12-16 19:45 - 00000000 ____D C:\Users\aceraspir\AppData\Local\SearchProtect
2013-12-15 03:07 - 2013-12-15 03:07 - 00000000 ____D C:\Users\aceraspir\Documents\Meine empfangenen Dateien
2013-12-15 03:03 - 2014-01-14 14:16 - 00151552 _____ C:\Windows\KMSEmulator.exe
2013-12-15 03:03 - 2014-01-14 14:16 - 00002982 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-15 03:03 - 2014-01-14 14:16 - 00000292 _____ C:\Windows\Tasks\AutoKMS.job
2013-12-15 03:03 - 2013-12-16 19:39 - 00000000 ____D C:\Windows\AutoKMS
2013-12-15 01:43 - 2013-12-15 01:43 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-12-15 01:42 - 2014-01-06 20:18 - 00000000 ____D C:\ProgramData\Adobe
2013-12-15 01:42 - 2013-12-15 01:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-15 01:41 - 2013-12-15 01:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-15 01:41 - 2013-12-15 01:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-15 01:41 - 2013-12-15 01:41 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-12-15 01:41 - 2013-12-15 01:41 - 00000000 ____D C:\Windows\system32\Macromed
2013-12-15 01:40 - 2014-01-06 20:17 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Adobe
2013-12-15 01:39 - 2013-12-15 01:39 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Macromedia
2013-12-15 01:26 - 2014-01-09 09:40 - 00000000 ____D C:\Users\aceraspir\Documents\Win7 Patcher by jepot22
2013-12-15 01:26 - 2014-01-09 09:01 - 00001617 _____ C:\Users\aceraspir\Desktop\Internet Explorer.lnk
2013-12-15 01:26 - 2013-12-15 01:26 - 00109296 _____ C:\Users\aceraspir\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-15 01:24 - 2014-01-09 08:29 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Ahead
2013-12-15 01:24 - 2013-12-15 01:24 - 00002772 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk
2013-12-15 01:24 - 2013-12-15 01:24 - 00002686 _____ C:\Users\Public\Desktop\Nero Home.lnk
2013-12-15 01:23 - 2013-12-17 15:30 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Ahead
2013-12-15 01:23 - 2013-12-15 01:23 - 00000000 ____D C:\ProgramData\Nero
2013-12-15 01:23 - 2013-12-15 01:23 - 00000000 ____D C:\Program Files (x86)\Nero
2013-12-15 01:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-15 01:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-15 00:46 - 2013-12-15 01:16 - 01592784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-15 00:42 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-12-15 00:42 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-15 00:20 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 00:20 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 00:20 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 00:20 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 00:20 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 00:20 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 00:20 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 00:20 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 00:20 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 00:20 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 00:20 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 00:20 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 00:20 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 00:20 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 00:20 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 00:20 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 00:20 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 00:20 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 00:20 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 00:20 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 00:20 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 00:20 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 00:20 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 00:20 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 00:20 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 00:20 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 00:20 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 00:20 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 00:20 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 00:20 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 00:20 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-15 00:13 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-12-15 00:13 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-12-15 00:13 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2013-12-15 00:13 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-12-15 00:13 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-12-15 00:13 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-12-15 00:13 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-12-15 00:13 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-12-15 00:13 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-12-15 00:13 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-12-15 00:13 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-12-15 00:13 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-12-15 00:13 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-12-15 00:13 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-12-15 00:13 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-12-15 00:13 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-12-15 00:13 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-12-15 00:13 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-12-15 00:13 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-12-15 00:13 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-12-15 00:13 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-12-15 00:13 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-12-15 00:13 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-12-15 00:13 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-12-15 00:13 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
==================== One Month Modified Files and Folders =======
2014-01-14 15:00 - 2014-01-14 14:59 - 00016613 _____ C:\Users\aceraspir\Downloads\FRST.txt
2014-01-14 14:59 - 2014-01-14 14:59 - 00000000 ____D C:\FRST
2014-01-14 14:59 - 2014-01-09 09:01 - 00001944 _____ C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-14 14:58 - 2014-01-14 14:58 - 02075648 _____ (Farbar) C:\Users\aceraspir\Downloads\FRST64.exe
2014-01-14 14:58 - 2014-01-09 09:01 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Lollipop
2014-01-14 14:58 - 2013-12-16 19:47 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-14 14:23 - 2009-07-14 05:45 - 00025616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-14 14:23 - 2009-07-14 05:45 - 00025616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-14 14:22 - 2013-12-20 19:28 - 00234530 _____ C:\Windows\WindowsUpdate.log
2014-01-14 14:18 - 2013-12-14 02:52 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{911A1E15-A874-42C0-BD43-6C6194A5F5A8}
2014-01-14 14:16 - 2013-12-15 03:03 - 00151552 _____ C:\Windows\KMSEmulator.exe
2014-01-14 14:16 - 2013-12-15 03:03 - 00002982 _____ C:\Windows\System32\Tasks\AutoKMS
2014-01-14 14:16 - 2013-12-15 03:03 - 00000292 _____ C:\Windows\Tasks\AutoKMS.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00002108 _____ C:\Windows\Tasks\Feven 2.2-chromeinstaller.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00002030 _____ C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00001324 _____ C:\Windows\Tasks\Feven 2.2-updater.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00001276 _____ C:\Windows\Tasks\Feven 2.2-codedownloader.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00001148 _____ C:\Windows\Tasks\Feven 2.2-enabler.job
2014-01-14 14:15 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\newnext.me
2014-01-14 14:15 - 2014-01-09 09:01 - 00000402 _____ C:\Windows\Tasks\Re-Markable Update.job
2014-01-14 14:15 - 2013-12-16 19:47 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-14 14:15 - 2013-12-16 19:45 - 00002112 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2014-01-14 14:15 - 2013-12-16 19:45 - 00001984 _____ C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
2014-01-14 14:15 - 2013-12-16 19:45 - 00001336 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job
2014-01-14 14:15 - 2013-12-16 19:45 - 00001238 _____ C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
2014-01-14 14:15 - 2013-12-16 19:45 - 00001138 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2014-01-14 14:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-14 14:14 - 2014-01-13 21:51 - 00000168 _____ C:\Windows\setupact.log
2014-01-14 14:14 - 2013-12-16 19:46 - 00000000 ____D C:\Program Files (x86)\iSafe
2014-01-14 14:13 - 2014-01-09 09:02 - 00002727 _____ C:\Users\aceraspir\daemonprocess.txt
2014-01-13 21:51 - 2014-01-13 21:51 - 00000826 _____ C:\Windows\PFRO.log
2014-01-13 21:51 - 2014-01-13 21:51 - 00000000 _____ C:\Windows\setuperr.log
2014-01-13 18:31 - 2014-01-13 18:26 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-13 18:27 - 2014-01-13 18:27 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-13 18:26 - 2014-01-13 18:26 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-01-13 18:26 - 2014-01-13 18:26 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-13 18:25 - 2014-01-13 18:24 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\aceraspir\Downloads\spybot-2.2.25.exe
2014-01-13 18:10 - 2013-12-14 02:06 - 00000000 ____D C:\Windows\Panther
2014-01-13 18:09 - 2014-01-13 18:09 - 00002780 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-13 18:09 - 2014-01-13 18:09 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-13 18:09 - 2014-01-13 18:09 - 00000000 ____D C:\Program Files\CCleaner
2014-01-13 18:07 - 2014-01-13 18:07 - 03571656 _____ (Piriform Ltd) C:\Users\aceraspir\Downloads\ccsetup409_slim.exe
2014-01-13 17:49 - 2014-01-13 17:49 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Mozilla
2014-01-13 17:47 - 2014-01-13 08:28 - 00000000 ____D C:\Program Files (x86)\Pixum
2014-01-13 17:35 - 2013-12-16 19:46 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\iSafe
2014-01-13 17:27 - 2014-01-13 08:36 - 00000000 ____D C:\ProgramData\tmp
2014-01-13 17:15 - 2014-01-13 08:36 - 00000000 ____D C:\ProgramData\hps
2014-01-13 08:40 - 2014-01-13 08:40 - 00000000 ____D C:\Users\aceraspir\restore
2014-01-13 08:40 - 2013-12-14 02:20 - 00000000 ____D C:\Users\aceraspir
2014-01-13 08:27 - 2014-01-13 08:27 - 01628432 _____ C:\Users\aceraspir\Downloads\setup_Pixum_Fotobuch.exe
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\ATI
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\Users\aceraspir\AppData\Local\ATI
2014-01-12 14:29 - 2014-01-12 14:29 - 00000000 ____D C:\ProgramData\ATI
2014-01-10 13:44 - 2011-04-12 08:43 - 00698926 _____ C:\Windows\system32\perfh007.dat
2014-01-10 13:44 - 2011-04-12 08:43 - 00149034 _____ C:\Windows\system32\perfc007.dat
2014-01-10 13:44 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-10 13:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-09 22:33 - 2014-01-05 20:42 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Skype
2014-01-09 21:47 - 2013-12-14 02:20 - 00000000 ____D C:\Users\aceraspir\AppData\Local\VirtualStore
2014-01-09 17:52 - 2013-12-26 00:03 - 00000000 ____D C:\ProgramData\Oracle
2014-01-09 17:51 - 2014-01-09 17:51 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-09 17:51 - 2014-01-09 17:51 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-09 17:51 - 2014-01-09 17:51 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-09 17:49 - 2014-01-09 17:49 - 00915368 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\chromeinstall-7u45 (1).exe
2014-01-09 09:40 - 2013-12-15 01:26 - 00000000 ____D C:\Users\aceraspir\Documents\Win7 Patcher by jepot22
2014-01-09 09:17 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Mobogenie
2014-01-09 09:10 - 2014-01-09 09:09 - 00002642 _____ C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-09 09:09 - 2014-01-09 09:09 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Smartbar
2014-01-09 09:08 - 2014-01-09 09:08 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\TuneUp Software
2014-01-09 09:08 - 2014-01-09 09:06 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-09 09:06 - 2014-01-09 09:06 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-09 09:05 - 2014-01-09 09:05 - 00001398 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-09 09:05 - 2014-01-09 09:05 - 00001239 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-09 09:05 - 2014-01-09 09:04 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\DVDVideoSoft
2014-01-09 09:05 - 2014-01-09 09:04 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-09 09:04 - 2014-01-09 09:04 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\OpenCandy
2014-01-09 09:03 - 2014-01-09 09:02 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00004354 _____ C:\Windows\System32\Tasks\Feven 2.2-updater
2014-01-09 09:02 - 2014-01-09 09:02 - 00004306 _____ C:\Windows\System32\Tasks\Feven 2.2-codedownloader
2014-01-09 09:02 - 2014-01-09 09:02 - 00004178 _____ C:\Windows\System32\Tasks\Feven 2.2-enabler
2014-01-09 09:02 - 2014-01-09 09:02 - 00001019 _____ C:\Users\aceraspir\Desktop\Mobogenie.lnk
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\Documents\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Local\genienext
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\AppData\Local\cache
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Users\aceraspir\.android
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\ProgramData\WPM
2014-01-09 09:02 - 2014-01-09 09:02 - 00000000 ____D C:\Program Files (x86)\Feven 2.2
2014-01-09 09:01 - 2014-01-09 09:01 - 00003058 _____ C:\Windows\System32\Tasks\Re-Markable Update
2014-01-09 09:01 - 2014-01-09 09:01 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2014-01-09 09:01 - 2013-12-16 19:48 - 00002461 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-09 09:01 - 2013-12-15 01:26 - 00001617 _____ C:\Users\aceraspir\Desktop\Internet Explorer.lnk
2014-01-09 09:01 - 2013-12-14 02:20 - 00001647 _____ C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-09 09:00 - 2014-01-09 09:00 - 00474528 _____ C:\Users\aceraspir\Downloads\free-youtube-to-mp3-converter.exe
2014-01-09 08:29 - 2013-12-15 01:24 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Ahead
2014-01-09 08:28 - 2014-01-09 08:28 - 00000000 ____D C:\Users\aceraspir\Documents\NeroVision
2014-01-06 20:18 - 2013-12-15 01:42 - 00000000 ____D C:\ProgramData\Adobe
2014-01-06 20:17 - 2013-12-15 01:40 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Adobe
2014-01-06 20:17 - 2013-12-14 13:40 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Adobe
2014-01-06 11:12 - 2014-01-05 22:58 - 02225709 _____ C:\Users\aceraspir\Downloads\Firmware_bs_8859_g_E_.rar
2014-01-05 20:42 - 2014-01-05 20:42 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-05 20:42 - 2014-01-05 20:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-05 20:42 - 2014-01-05 20:42 - 00000000 ____D C:\ProgramData\Skype
2014-01-05 20:41 - 2014-01-05 20:40 - 35095200 _____ (Skype Technologies S.A.) C:\Users\aceraspir\Downloads\Skype611SetupFull.exe
2013-12-29 12:36 - 2013-12-29 12:36 - 00000000 ____D C:\Users\aceraspir\Documents\Nero Home
2013-12-26 00:41 - 2013-12-26 00:03 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\.technic
2013-12-26 00:32 - 2013-12-26 00:32 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-26 00:32 - 2013-12-26 00:32 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-12-26 00:32 - 2013-12-26 00:32 - 00000000 ____D C:\Program Files\Java
2013-12-26 00:31 - 2013-12-26 00:30 - 30694824 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\jre-7u45-windows-x64.exe
2013-12-26 00:25 - 2013-12-26 00:25 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-26 00:18 - 2013-12-26 00:15 - 00000000 ____D C:\Users\aceraspir\AppData\Local\DieMcSiedler-Software
2013-12-26 00:03 - 2013-12-26 00:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-26 00:00 - 2013-12-26 00:00 - 00915368 _____ (Oracle Corporation) C:\Users\aceraspir\Downloads\chromeinstall-7u45.exe
2013-12-23 15:22 - 2013-12-23 15:22 - 00000000 ____D C:\Users\aceraspir\Downloads\Firmware_WD_9545_A_A
2013-12-23 14:52 - 2013-12-23 14:52 - 00001305 _____ C:\Users\aceraspir\Desktop\Continue Keepass.lnk
2013-12-22 18:08 - 2013-12-17 15:30 - 00000076 _____ C:\Users\aceraspir\AppData\default.pls
2013-12-22 18:04 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-20 07:27 - 2013-12-16 19:46 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-19 18:25 - 2013-12-19 18:25 - 00000425 _____ C:\Windows\BRWMARK.INI
2013-12-18 07:52 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-17 17:02 - 2013-12-17 17:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-12-17 15:30 - 2013-12-15 01:23 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Ahead
2013-12-17 13:29 - 2013-12-14 02:42 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 13:29 - 2013-12-14 02:42 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 13:29 - 2013-12-14 02:42 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-16 20:21 - 2013-12-16 20:21 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\eCyber
2013-12-16 19:53 - 2013-12-16 19:47 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-16 19:53 - 2013-12-16 19:47 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-16 19:48 - 2013-12-16 19:47 - 00000000 ____D C:\Users\aceraspir\AppData\Local\Google
2013-12-16 19:48 - 2013-12-16 19:47 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-16 19:47 - 2013-12-16 19:47 - 00001780 _____ C:\Users\Public\Desktop\YAC.lnk
2013-12-16 19:47 - 2013-12-16 19:47 - 00000000 ____D C:\Windows\system32\log
2013-12-16 19:46 - 2013-12-16 19:46 - 00001087 _____ C:\Users\aceraspir\Desktop\MyPC Backup.lnk
2013-12-16 19:46 - 2013-12-16 19:46 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-12-16 19:46 - 2013-12-14 02:20 - 00000000 ___RD C:\Users\aceraspir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-16 19:45 - 2013-12-16 19:45 - 00004366 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-updater
2013-12-16 19:45 - 2013-12-16 19:45 - 00004268 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
2013-12-16 19:45 - 2013-12-16 19:45 - 00004168 _____ C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
2013-12-16 19:45 - 2013-12-16 19:45 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-12-16 19:45 - 2013-12-16 19:44 - 00000000 ____D C:\Users\aceraspir\AppData\Local\SearchProtect
2013-12-16 19:39 - 2013-12-15 03:03 - 00000000 ____D C:\Windows\AutoKMS
2013-12-15 03:07 - 2013-12-15 03:07 - 00000000 ____D C:\Users\aceraspir\Documents\Meine empfangenen Dateien
2013-12-15 02:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 01:43 - 2013-12-15 01:43 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-12-15 01:42 - 2013-12-15 01:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-15 01:41 - 2013-12-15 01:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-15 01:41 - 2013-12-15 01:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-15 01:41 - 2013-12-15 01:41 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-12-15 01:41 - 2013-12-15 01:41 - 00000000 ____D C:\Windows\system32\Macromed
2013-12-15 01:39 - 2013-12-15 01:39 - 00000000 ____D C:\Users\aceraspir\AppData\Roaming\Macromedia
2013-12-15 01:26 - 2013-12-15 01:26 - 00109296 _____ C:\Users\aceraspir\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-15 01:24 - 2013-12-15 01:24 - 00002772 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk
2013-12-15 01:24 - 2013-12-15 01:24 - 00002686 _____ C:\Users\Public\Desktop\Nero Home.lnk
2013-12-15 01:23 - 2013-12-15 01:23 - 00000000 ____D C:\ProgramData\Nero
2013-12-15 01:23 - 2013-12-15 01:23 - 00000000 ____D C:\Program Files (x86)\Nero
2013-12-15 01:16 - 2013-12-15 00:46 - 01592784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-15 00:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
Some content of TEMP:
====================
C:\Users\aceraspir\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-24 18:06
==================== End Of Log ============================
--- --- --- [/CODE] die frst.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-01-2014 02
Ran by aceraspir at 2014-01-14 15:00:57
Running from C:\Users\aceraspir\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 2.4.595.9 - Advanced Micro Devices Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2011.0526.27.42091 - Ihr Firmenname) Hidden
ATI Catalyst Install Manager (Version: 3.0.820.0 - ATI Technologies, Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0526.27.42091 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0526.27.42091 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0526.27.42091 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help English (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help French (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help German (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0526.0026.42091 - ATI) Hidden
ccc-utility64 (Version: 2011.0526.27.42091 - ATI) Hidden
CCleaner (Version: 4.09 - Piriform)
DMUninstaller (x32 Version: - )
EVEREST Home Edition v2.20 (x32 Version: 2.20 - Lavalys Inc)
Feven 2.2 (x32 Version: 1.33.153.1 - Feven) <==== ATTENTION
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Lollipop (HKCU Version: - Lollipop Network, S.L.) <==== ATTENTION
Maxthon Cloud Browser (x32 Version: 4.2.0.4000 - Maxthon International Limited)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mobogenie (x32 Version: - Mobogenie.com) <==== ATTENTION
MyPC Backup (Version: - MyPC Backup) <==== ATTENTION
Nero 7 Ultra Edition (x32 Version: 7.02.2760 - Nero AG)
Plus-HD-1.3 (x32 Version: 1.31.153.4 - Plus HD) <==== ATTENTION
Re-Markable (x32 Version: - Re-Markable Software)
Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WPM17.8.0.3297 (x32 Version: 17.8.0.3297 - Cherished Technololgy LIMITED) <==== ATTENTION
YAC (x32 Version: - ELEX DO BRASIL PARTICIPAÇÕES LTDA)
Yahoo Community Smartbar (x32 Version: 10.179.66.13636 - Linkury Inc.) <==== ATTENTION
Yahoo Community Smartbar Engine (HKCU Version: 10.179.66.13636 - Linkury Inc.) <==== ATTENTION
==================== Restore Points =========================
24-12-2013 17:13:07 Geplanter Prüfpunkt
25-12-2013 23:01:52 Installed Java 7 Update 45
25-12-2013 23:23:19 Removed Java 7 Update 45
25-12-2013 23:32:06 Installed Java 7 Update 45 (64-bit)
09-01-2014 16:50:46 Installed Java 7 Update 45
13-01-2014 16:38:45 TuneUp Utilities 2014 wird entfernt
13-01-2014 16:40:23 TuneUp Utilities 2014 (de-DE) wird entfernt
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {02063875-CE3D-4D2F-B5F4-955828C8DCFA} - System32\Tasks\Plus-HD-1.3-updater => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe [2013-12-16] (Plus HD) <==== ATTENTION
Task: {25429998-D47A-4D63-A2EA-395C553D18F9} - System32\Tasks\Re-Markable Update => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe [2014-01-09] ()
Task: {2AB6E3E4-5C43-4698-9FC7-70D899D0CFA3} - System32\Tasks\Plus-HD-1.3-chromeinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe [2013-12-16] (Plus HD) <==== ATTENTION
Task: {2D840C6D-2840-4EC0-8045-1B7ADEC318EE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {44DABFDE-D8D1-4E5B-A43F-A52D7BF953CA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {64BC8BED-0317-4733-AE5A-772A344A3770} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {68F35B98-51A6-4632-AC35-FC0EA90304FB} - System32\Tasks\Plus-HD-1.3-enabler => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [2013-12-16] (Plus HD) <==== ATTENTION
Task: {76BC3DE3-B35B-4317-A07F-2B5597B427A9} - System32\Tasks\Feven 2.2-firefoxinstaller => C:\Program Files (x86)\Feven 2.2\Feven 2.2-firefoxinstaller.exe [2014-01-09] (Feven) <==== ATTENTION
Task: {8D38AA02-E9C7-440A-930F-31524C5440AD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-16] (Google Inc.)
Task: {8EFC5C4E-0A25-48DD-A930-F4845E8B7BC3} - System32\Tasks\Feven 2.2-updater => C:\Program Files (x86)\Feven 2.2\Feven 2.2-updater.exe [2014-01-09] (Feven) <==== ATTENTION
Task: {8F763F5A-0794-4235-8F5C-360E207D0026} - System32\Tasks\Feven 2.2-chromeinstaller => C:\Program Files (x86)\Feven 2.2\Feven 2.2-chromeinstaller.exe [2014-01-09] (Feven) <==== ATTENTION
Task: {95E1B071-8B67-41D3-B559-742FB848D8A4} - System32\Tasks\Plus-HD-1.3-codedownloader => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe [2013-12-16] (Plus HD) <==== ATTENTION
Task: {AB5AA864-0E1E-4818-AD37-2EAAAC2E412C} - System32\Tasks\Plus-HD-1.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [2013-12-16] (Plus HD) <==== ATTENTION
Task: {C338CF24-33CF-4286-9F35-5A1C8274B78C} - System32\Tasks\Feven 2.2-codedownloader => C:\Program Files (x86)\Feven 2.2\Feven 2.2-codedownloader.exe [2014-01-09] (Feven) <==== ATTENTION
Task: {C39CDE04-F310-4BF4-9FD8-0C06A56F3CC1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-16] (Google Inc.)
Task: {E2D1C753-5E58-4C1E-983A-32012D475386} - System32\Tasks\Feven 2.2-enabler => C:\Program Files (x86)\Feven 2.2\Feven 2.2-enabler.exe [2014-01-09] (Feven) <==== ATTENTION
Task: {E36CCB0F-2F52-474B-95FA-E0F275588A74} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-12-15] ()
Task: {F4E4C05B-2933-4184-8F7A-EBEABBC4FB97} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2013-11-21] (Maxthon International ltd.)
Task: {F6ECC38F-FA0E-411A-A36F-FEC8CDF95368} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\Feven 2.2-chromeinstaller.job => C:\Program Files (x86)\Feven 2.2\Feven 2.2-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-codedownloader.job => C:\Program Files (x86)\Feven 2.2\Feven 2.2-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-enabler.job => C:\Program Files (x86)\Feven 2.2\Feven 2.2-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job => C:\Program Files (x86)\Feven 2.2\Feven 2.2-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-updater.job => C:\Program Files (x86)\Feven 2.2\Feven 2.2-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-enabler.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-updater.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
==================== Loaded Modules (whitelisted) =============
2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-09-19 23:37 - 2013-09-19 23:37 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2013-09-19 23:32 - 2013-09-19 23:32 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2011-03-22 10:17 - 2011-03-22 10:17 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-26 00:25 - 2011-05-26 00:25 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-12-14 02:42 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-13 18:26 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-01-13 18:26 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-13 18:26 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-01-13 18:26 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-01-13 18:26 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00034072 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00062232 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\srau.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00149784 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00111896 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 02056984 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00055064 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\spbl.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00012568 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\siem.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00048408 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\sppsm.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00727320 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00081688 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00013592 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00016664 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00030488 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\srut.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00019736 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\srsbs.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00057112 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00014104 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\srpdm.dll
2014-01-09 09:09 - 2014-01-09 09:09 - 00911872 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00013592 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\sgml.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00052504 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-11-21 09:48 - 2013-11-21 09:48 - 00047384 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-11-21 09:48 - 2013-11-21 09:48 - 00025368 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00024856 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-11-21 09:49 - 2013-11-21 09:49 - 00248088 _____ () C:\Users\aceraspir\AppData\Local\Smartbar\Application\srns.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/14/2014 02:15:53 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0xef8
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:15:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0xe00
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:15:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/14/2014 02:15:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0x23c
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:14:58 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0x14c
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:11:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0xb40
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:11:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0x8e0
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:10:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/14/2014 02:10:49 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0x1fc
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
Error: (01/14/2014 02:10:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Name des fehlerhaften Moduls: iSafeSvc2.exe, Version: 3.6.24.5531, Zeitstempel: 0x529f09a1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003d469
ID des fehlerhaften Prozesses: 0x140
Startzeit der fehlerhaften Anwendung: 0xiSafeSvc2.exe0
Pfad der fehlerhaften Anwendung: iSafeSvc2.exe1
Pfad des fehlerhaften Moduls: iSafeSvc2.exe2
Berichtskennung: iSafeSvc2.exe3
System errors:
=============
Error: (01/14/2014 02:27:55 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (01/14/2014 02:27:54 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (01/14/2014 02:16:41 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
Error: (01/14/2014 02:16:22 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
Error: (01/14/2014 02:15:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Search Protect by Conduit Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/14/2014 02:10:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Search Protect by Conduit Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/13/2014 10:00:56 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (01/13/2014 09:53:48 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
Error: (01/13/2014 09:53:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/13/2014 09:53:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.
Microsoft Office Sessions:
=========================
Error: (01/14/2014 02:15:53 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d469ef801cf112ab688d761C:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exefe04ae00-7d1d-11e3-ab0c-dc0ea1200b88
Error: (01/14/2014 02:15:36 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d469e0001cf112aab4634f8C:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exef4140efe-7d1d-11e3-ab0c-dc0ea1200b88
Error: (01/14/2014 02:15:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/14/2014 02:15:14 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d46923c01cf112aa0224428C:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exee6ebd3dd-7d1d-11e3-ab0c-dc0ea1200b88
Error: (01/14/2014 02:14:58 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d46914c01cf112a95d9923bC:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exedd71f95e-7d1d-11e3-ab0c-74de2bb88460
Error: (01/14/2014 02:11:36 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d469b4001cf112a1dead7cbC:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exe64f20afd-7d1d-11e3-a53e-dc0ea1200b88
Error: (01/14/2014 02:11:16 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d4698e001cf112a0eeb4c34C:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exe58f81e9e-7d1d-11e3-a53e-dc0ea1200b88
Error: (01/14/2014 02:10:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/14/2014 02:10:49 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d4691fc01cf112a02892c61C:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exe49545415-7d1d-11e3-a53e-dc0ea1200b88
Error: (01/14/2014 02:10:33 PM) (Source: Application Error)(User: )
Description: iSafeSvc2.exe3.6.24.5531529f09a1iSafeSvc2.exe3.6.24.5531529f09a1c00000050003d46914001cf1129f872775aC:\Program Files (x86)\iSafe\iSafeSvc2.exeC:\Program Files (x86)\iSafe\iSafeSvc2.exe3fccfab5-7d1d-11e3-a53e-74de2bb88460
CodeIntegrity Errors:
===================================
Date: 2013-12-14 02:49:57.307
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ACERAS~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-12-14 02:49:57.292
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ACERAS~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-12-14 02:49:56.995
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-12-14 02:49:56.980
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 22%
Total physical RAM: 7658.9 MB
Available physical RAM: 5965.65 MB
Total Pagefile: 15315.98 MB
Available Pagefile: 13250.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:682.54 GB) (Free:638.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: F5B79832)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
14.01.2014, 15:45
| #3 |
| /// Malwareteam | Viel zu viel Werbung -.- Windows 7 Acer Laptop Hallo
__________________bitte keine PM´s senden ich schau mir die Beiträge immer der Reihe nach durch. Schritt 1: Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2: Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 3: erstelle ein neues FRST Logfile und poste es hier
__________________ |
|
| Themen zu Viel zu viel Werbung -.- Windows 7 Acer Laptop |
| acer, biete, community, fenster, funktioniert, interne, internet, konnte, laptop, mobogenie, mobogenie entfernen, nationzoom, nationzoom entfernen, nicht mehr, ram, spielen, spybot, versucht, viel werbung, werbung, windows, windows 7, würdet, öffnen |
Gruß Aneri 
Hybrid-Darstellung
