| |
| |||||||
Log-Analyse und Auswertung: Kann awesomehp.com nicht entfernen. Hier mein Logfile...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
09.02.2014, 17:40
| #16 |
| |  Kann awesomehp.com nicht entfernen. Hier mein Logfile... Aktuelles FRST Log: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-02-2014 02 Ran by ADDISFARI (administrator) on ADDISFARI-PC on 09-02-2014 17:38:12 Running from C:\Users\ADDISFARI\Downloads Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Devguru Co., Ltd.) C:\windows\system32\dgdersvc.exe () C:\Program Files\GNU\GnuPG\dirmngr.exe (Ellora Assets Corp.) C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe (Teruten) C:\windows\system32\FsUsbExService.Exe () C:\ProgramData\DatacardService\HWDeviceService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe (Motorola Mobility LLC) C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe (The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe () C:\windows\system32\PnkBstrA.exe (Motorola) C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe (Motorola Mobility LLC) C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe (Microsoft Corporation) C:\windows\System32\IgrsSvcs.exe () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Cypherix Software (India) Pvt. Ltd.) C:\windows\system32\cryptainersrv.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe () C:\Program Files\DivX\DivX Update\DivXUpdate.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe (Microsoft Corporation) C:\windows\system32\UI0Detect.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe (The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe (Alexander Miehlke Softwareentwicklung) C:\Program Files\Browser-Anonymisierer\BrowserMaulkorb.exe (GamersFirst) C:\Users\ADDISFARI\AppData\Local\GamersFirst\LIVE!\Live.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Nullsoft, Inc.) C:\Program Files\Winamp\winamp.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Farbar) C:\Users\ADDISFARI\Downloads\FRST(2).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [163840 2008-03-26] (Alps Electric Co., Ltd.) HKLM\...\Run: [UpdateP2GShortCut] - C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.) HKLM\...\Run: [EnergyUtility] - C:\Program Files\Lenovo\Energy Management\utility.exe [4081480 2009-07-15] (Lenovo(beijing) Limited) HKLM\...\Run: [Energy Management] - C:\Program Files\Lenovo\Energy Management\Energy Management.exe [5064520 2009-06-25] (Lenovo (Beijing) Limited) HKLM\...\Run: [ Malwarebytes Anti-Malware (reboot)] - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [887432 2013-04-04] (Malwarebytes Corporation) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.) HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] () HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2013-09-12] (RealNetworks, Inc.) HKLM\...\Run: [TrojanScanner] - C:\Program Files\Trojan Remover\Trjscan.exe [1704720 2014-01-23] (Simply Super Software) HKLM\...\Run: [] - [X] HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [3643224 2014-01-23] () HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM\...\Run: [NielsenOnline] - C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe [91688 2013-10-30] (The Nielsen Company) HKLM\...\RunOnce: [Trojan Remover] - "C:\Program Files\Trojan Remover\RMVTRJAN.EXE" /restart [5512440 2014-01-21] (Simply Super Software) Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation) HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\Run: [AVG-Secure-Search-Update_0214c] - C:\Users\ADDISFARI\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=acd991a8ca67e0242fc7705c030e4e96-be4ed0681eee9877f497695080bb092a41b3298f /CMPID=0214c HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware) HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {1d131876-64f3-11e3-9a6d-002622cd5b23} - F:\setup.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {1e22a027-1b0b-11e2-9d6f-002622cd5b23} - F:\AutoRun.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {1e22a036-1b0b-11e2-9d6f-002622cd5b23} - F:\AutoRun.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {1e22a048-1b0b-11e2-9d6f-002622cd5b23} - F:\AutoRun.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {4c61ec87-8c13-11e3-9f31-002622cd5b23} - F:\LGAutoRun.exe HKU\S-1-5-21-2144711418-2932522362-1687146295-1003\...\MountPoints2: {f5ee37c8-87dd-11e2-ab3d-002622cd5b23} - F:\AutoRun.exe Startup: C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Browser-Anonymisierer.lnk ShortcutTarget: Browser-Anonymisierer.lnk -> C:\Program Files\Browser-Anonymisierer\BrowserMaulkorb.exe (Alexander Miehlke Softwareentwicklung) Startup: C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Users\ADDISFARI\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst) ==================== Internet (Whitelisted) ==================== HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search SearchScopes: HKCU - {9608064F-7E5A-4576-9DDC-20BF9A7271BF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_32cd4098f87b4af19a3a0a48b93d56ce_18_38_20121228_DE_ie_ds_OC1&query={searchTerms} BHO: Recorder Toolbar - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Program Files\MedienTeam66\MP3 Recorder for YouTube\IEPlugin.dll (MedienTeam66) BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files\Web Check\WebCheck.dll (Web Check) Toolbar: HKLM - Recorder Toolbar - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Program Files\MedienTeam66\MP3 Recorder for YouTube\IEPlugin.dll (MedienTeam66) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{06006141-F9D3-4D8C-A965-2CF43363E75F}: [NameServer]193.189.244.206 193.189.244.225 Tcpip\..\Interfaces\{8DCAB006-E30A-4241-A02C-3DFA1D75B1BD}: [NameServer]193.189.244.225 193.189.244.206 Tcpip\..\Interfaces\{A0D8F58D-3376-47DF-A243-65732515AA9D}: [NameServer]193.189.244.206 193.189.244.225 FireFox: ======== FF ProfilePath: C:\Users\ADDISFARI\AppData\Roaming\Mozilla\Firefox\Profiles\pxl660ik.default-1390915334048 FF Homepage: https://www.google.de/?gws_rd=cr&ei=ytXoUuXMC4OEtAa344HgDQ FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.) FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF Plugin: @nielsen/FirefoxTracker - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll (Nielsen) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks) FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\ADDISFARI\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\ADDISF~1\AppData\Roaming\Flatcast\NpFv522.dll (1 mal 1 Software GmbH) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NpFv522.dll (1 mal 1 Software GmbH) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\ADDISFARI\AppData\Roaming\Mozilla\Firefox\Profiles\pxl660ik.default-1390915334048\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-28] FF Extension: Recorder Toolbar - C:\Program Files\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2013-12-20] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} [2013-12-20] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-20] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-20] FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [] FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-12] FF HKLM\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [] FF HKLM\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ FF Extension: Freemake Youtube Download Button - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [] FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] FF HKLM\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files\Web Check\WebCheck.xpi FF Extension: Web Check - C:\Program Files\Web Check\WebCheck.xpi [2013-08-12] FF HKLM\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\ADDISFARI\AppData\Roaming\Mozilla\Firefox\Profiles\5w1bpdoi.default-1382463406057\extensions\lightningnewtab@gmail.com.xpi FF HKLM\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi FF Extension: Nielsen NetSight - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi [2014-02-09] FF HKLM\...\Thunderbird\Extensions: [avgthb@avg.com] - C:\Program Files\AVG\AVG2012\Thunderbird\ FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ [] FF HKCU\...\Firefox\Extensions: [{b05cdfa0-c3d6-45b9-9264-2d95a4c9240e}] - C:\Program Files\Show-Password\150.xpi Chrome: ======= CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP66906FF9-F222-41A7-A0A2-160A545EEE75&SSPV= CHR RestoreOnStartup: "www.google.com"],"startup_urls":["http:\/\/search.conduit.com\/?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP66906FF9-F222-41A7-A0A2-160A545EEE75&SSPV=" CHR DefaultSearchKeyword: conduit.search CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP66906FF9-F222-41A7-A0A2-160A545EEE75&q={searchTerms}&SSPV= CHR DefaultNewTabURL: CHR Extension: (Freemake Video Downloader) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2013-12-14] CHR Extension: (Web Check) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacechnliklhcacondhhkkfobapdopee [2013-11-02] CHR Extension: (Freemake Youtube Download Button) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2013-12-14] CHR Extension: (RealDownloader) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-12-29] CHR Extension: (Freemake Video Converter) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj [2013-08-04] CHR Extension: (Skype Click to Call) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-12-29] CHR Extension: (Show-Password) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\logekkkdbdidmmcgkonmmonclldogceg [2014-01-22] CHR Extension: (Google Wallet) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28] CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-12-29] CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-07-23] CHR HKLM\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files\Web Check\WebCheck.crx [2013-08-12] CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2013-07-23] CHR HKLM\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\ADDISF~1\AppData\Local\Temp\crx6623.tmp [2013-07-23] CHR HKLM\...\Chrome\Extension: [hphehadppenpmajgnkjdcopcfijjegaf] - C:\Program Files\Jump Flip\hphehadppenpmajgnkjdcopcfijjegaf.crx [2013-07-23] CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14] CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2012-12-28] CHR HKLM\...\Chrome\Extension: [jgceplfonlgodadnpognljgdjlcnpjnh] - C:\Program Files\NetRatingsNetSight\NetSight\meter1\extension.crx [2014-02-06] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02] CHR HKLM\...\Chrome\Extension: [mlomedglbadmjkclcfkhdocmieekmngp] - C:\ProgramData\Vaudix\mlomedglbadmjkclcfkhdocmieekmngp.crx [2012-10-02] CHR HKLM\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\ADDISFARI\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-27] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com) R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [582944 2009-07-01] (Broadcom Corporation.) S3 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH) R2 dgdersvc; C:\windows\system32\dgdersvc.exe [95568 2010-11-15] (Devguru Co., Ltd.) R2 DirMngr; C:\Program Files\GNU\GnuPG\dirmngr.exe [224256 2011-03-02] () R2 FreemakeVideoCapture; C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-12-04] (Ellora Assets Corp.) R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] () R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED) R2 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-14] (Lenovo Group Limited) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [651232 2014-01-23] () S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [414984 2009-07-28] (Lenovo Group Limited) S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [472328 2009-07-28] (Lenovo Group Limited) R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [246112 2012-10-21] () R2 Motorola Device Manager; C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-07-31] (Motorola Mobility LLC) S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation) R2 NielsenUpdate; C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe [2838568 2013-10-30] (The Nielsen Company) R2 PnkBstrA; C:\windows\system32\PnkBstrA.exe [76888 2013-07-04] () R2 PST Service; C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo Group Limited) R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-14] (Lenovo Group Limited) R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 ssoftservice; C:\windows\system32\cryptainersrv.exe [927984 2009-12-04] (Cypherix Software (India) Pvt. Ltd.) ==================== Drivers (Whitelisted) ==================== R3 ACPIVPC; C:\windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-01-20] (Lenovo Corporation) R1 Avgdiskx; C:\windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) S3 Bridge0; C:\windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo) R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [36640 2010-11-15] () R1 funfrm; C:\windows\system32\Drivers\funfrm.sys [54800 2009-10-10] () R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 NETwNs32; C:\windows\System32\DRIVERS\NETwNs32.sys [7523840 2014-01-07] (Intel Corporation) R1 nnfwdk; C:\Program Files\NetRatingsNetSight\NetSight\meter1\nnfwdk.sys [23080 2013-12-18] (The Nielsen Company) R2 npf; C:\windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R3 SmbDrvI; C:\windows\System32\DRIVERS\Smb_driver_Intel.sys [27888 2014-01-20] (Synaptics Incorporated) R3 SNP2UVC; C:\windows\System32\DRIVERS\snp2uvc.sys [1759616 2009-03-13] () R1 ssoftnt4; C:\windows\system32\Drivers\ssoftnt4.sys [97784 2010-02-03] (Cypherix Software (India) Pvt. Ltd.) S3 ssudserd; C:\windows\System32\DRIVERS\ssudserd.sys [181912 2013-02-06] (DEVGURU Co., LTD.(www.devguru.co.kr)) R3 tap0901; C:\windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project) R3 Trufos; C:\windows\System32\DRIVERS\Trufos.sys [340624 2013-07-17] (BitDefender S.R.L.) R3 wdmirror; C:\windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Windows (R) Codename Longhorn DDK provider) S3 wsvd; C:\windows\System32\DRIVERS\wsvd.sys [81704 2009-07-21] (CyberLink) S3 BTCFilterService; system32\DRIVERS\motfilt.sys [X] S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X] S3 motccgp; system32\DRIVERS\motccgp.sys [X] S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X] S3 motmodem; system32\DRIVERS\motmodem.sys [X] S3 MotoSwitchService; system32\DRIVERS\motswch.sys [X] S3 Motousbnet; system32\DRIVERS\Motousbnet.sys [X] S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [X] S2 Nsynas32; No ImagePath S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-09 17:37 - 2014-02-09 17:37 - 01138688 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST(2).exe 2014-02-09 13:10 - 2014-02-09 13:10 - 00000022 _____ () C:\windows\S.dirmngr 2014-02-09 11:10 - 2014-02-09 11:10 - 01059584 _____ () C:\Users\ADDISFARI\Downloads\Assassin's-Creed-2-Setup.exe 2014-02-09 11:07 - 2014-02-09 11:07 - 01059584 _____ () C:\Users\ADDISFARI\Downloads\Assassin's-Creed_-Brotherhood-Setup.exe 2014-02-09 02:07 - 2014-02-09 02:07 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner(2).exe 2014-02-08 12:49 - 2014-02-08 12:52 - 50739220 _____ () C:\Users\ADDISFARI\Desktop\Rote Flora Eskalation in Hamburg 21.12.13.avi 2014-02-08 01:26 - 2014-02-08 01:26 - 00013501 _____ () C:\Users\ADDISFARI\Downloads\CuOMHP14.part1.rar 2014-02-07 15:32 - 2014-02-07 15:33 - 00259584 _____ (OldTimer Tools) C:\Users\ADDISFARI\Downloads\OTH.scr 2014-02-06 13:07 - 2014-02-06 13:07 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_nnfwdk_01009.Wdf 2014-02-06 13:00 - 2014-02-06 13:00 - 02750688 _____ (The Nielsen Company) C:\Users\ADDISFARI\Downloads\netsight_setup_6.1.0.11_MP_Production_mid51063961049_p.exe 2014-02-06 13:00 - 2014-02-06 13:00 - 00000878 _____ () C:\nsinst.log 2014-02-06 13:00 - 2014-02-06 13:00 - 00000000 ____D () C:\Program Files\NetRatingsNetSight 2014-02-05 23:57 - 2014-02-09 13:10 - 00000508 _____ () C:\windows\Tasks\Malwarebytes Anti-Exploit.job 2014-02-05 23:56 - 2014-02-05 23:56 - 01769928 _____ (Malwarebytes ) C:\Users\ADDISFARI\Downloads\mbae-setup-0.09.5.1000(1).exe 2014-02-05 23:53 - 2014-02-05 23:58 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit 2014-02-05 23:53 - 2014-02-05 23:53 - 01769928 _____ (Malwarebytes ) C:\Users\ADDISFARI\Downloads\mbae-setup-0.09.5.1000.exe 2014-02-05 23:53 - 2013-07-16 03:41 - 01498960 _____ (Microsoft Corporation) C:\windows\system32\msvcr100d.dll 2014-02-05 23:53 - 2013-07-16 03:41 - 00743248 _____ (Microsoft Corporation) C:\windows\system32\msvcp100d.dll 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\SUPERAntiSpyware.com 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware 2014-02-05 22:42 - 2014-02-05 22:43 - 29393568 _____ (SUPERAntiSpyware) C:\Users\ADDISFARI\Downloads\SUPERAntiSpyware.exe 2014-02-04 20:41 - 2014-02-04 20:41 - 05192704 _____ (Geza Kovacs) C:\Users\ADDISFARI\Downloads\unetbootin-windows-585.exe 2014-02-04 20:23 - 2014-02-04 20:23 - 00000839 _____ () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-02-04 20:21 - 2014-02-04 20:21 - 00037482 _____ () C:\Users\ADDISFARI\Downloads\debian-live-7.2-amd64-xfce-desktop.iso.torrent 2014-02-04 20:18 - 2014-02-04 20:18 - 01307736 _____ (BitTorrent Inc.) C:\Users\ADDISFARI\Downloads\utorrent.exe 2014-02-04 20:13 - 2014-02-04 20:16 - 00000000 ____D () C:\dasi 2014-02-04 19:00 - 2014-02-07 13:23 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\lovesongs new 2014-02-04 15:10 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\windows\system32\sdnclean.exe 2014-02-04 14:59 - 2014-02-04 14:59 - 00614784 _____ (Chip Digital GmbH) C:\Users\ADDISFARI\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-02-04 14:39 - 2014-02-04 14:39 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\LavasoftStatistics 2014-02-04 14:25 - 2014-02-04 14:25 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\bilder sms 2014-02-04 14:05 - 2014-02-04 14:05 - 00000000 ____D () C:\Program Files\Lavasoft 2014-02-04 14:03 - 2014-02-04 14:03 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Lavasoft 2014-02-04 14:03 - 2014-02-04 14:03 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft 2014-02-04 14:02 - 2014-02-04 14:02 - 01725064 _____ () C:\Users\ADDISFARI\Downloads\Adaware_Installer_11.1.exe 2014-02-04 14:02 - 2014-02-04 14:02 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-02-04 14:00 - 2014-02-04 14:00 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\logfiles trojaner-info.de 2014-02-03 18:21 - 2014-02-03 18:21 - 00000000 ____D () C:\ProgramData\Licenses 2014-02-03 17:26 - 2014-02-03 17:26 - 00000000 ____D () C:\Users\ADDISFARI\Documents\Simply Super Software 2014-02-03 17:26 - 2014-02-03 17:26 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Simply Super Software 2014-02-03 17:25 - 2014-02-03 17:25 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-02-03 17:25 - 2014-02-03 17:25 - 00000000 ____D () C:\Program Files\Trojan Remover 2014-02-03 17:17 - 2014-02-03 17:18 - 21407864 _____ (Simply Super Software ) C:\Users\ADDISFARI\Downloads\trjsetup690.exe 2014-02-03 17:11 - 2014-02-03 17:11 - 00000000 ____D () C:\ProgramData\GridinSoft 2014-02-03 17:08 - 2014-02-03 17:10 - 42070072 _____ (GridinSoft LLC) C:\Users\ADDISFARI\Downloads\gtk-2.2.1.3-setup.exe 2014-02-03 16:40 - 2014-02-03 16:40 - 01137152 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST(1).exe 2014-02-03 16:38 - 2014-02-03 16:38 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner(1).exe 2014-02-03 12:12 - 2014-02-03 12:12 - 00000000 _____ () C:\END 2014-02-01 22:01 - 2014-02-01 22:01 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\NVIDIA 2014-02-01 22:00 - 2014-02-01 22:01 - 00000000 ____D () C:\ProgramData\Pinnacle VideoSpin 2014-02-01 22:00 - 2014-02-01 22:00 - 00000000 ____D () C:\Program Files\Pinnacle 2014-02-01 21:50 - 2014-02-01 21:50 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\SearchProtect 2014-01-31 09:30 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll 2014-01-31 09:28 - 2014-01-31 09:28 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive 2014-01-30 22:37 - 2014-01-30 22:38 - 02347384 _____ (ESET) C:\Users\ADDISFARI\Downloads\esetsmartinstaller_enu.exe 2014-01-30 18:15 - 2014-01-30 18:15 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\AVG2014 2014-01-30 18:13 - 2014-01-30 18:13 - 00000000 ___HD () C:\$AVG 2014-01-30 18:08 - 2014-01-30 18:17 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Avg2014 2014-01-30 18:05 - 2014-02-04 20:57 - 00046006 _____ () C:\windows\PFRO.log 2014-01-30 15:50 - 2014-01-30 16:06 - 271747771 _____ () C:\Users\ADDISFARI\Downloads\LMS-Reality_Check-CD-FLAC-1999-BOCKSCAR.rar 2014-01-30 15:36 - 2014-01-12 08:13 - 33952652 _____ () C:\Users\ADDISFARI\Downloads\04-lms-sound_in_the_air.flac 2014-01-30 15:15 - 2014-01-30 15:34 - 57596361 _____ () C:\Users\ADDISFARI\Downloads\LMS_Reality_Check_CD_FLAC_1999_BOCKSCAR.part2.rar 2014-01-30 13:36 - 2014-02-09 02:07 - 00001820 _____ () C:\sc-cleaner.txt 2014-01-30 13:36 - 2014-01-30 13:36 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner.exe 2014-01-30 13:28 - 2014-01-30 13:28 - 01166132 _____ () C:\Users\ADDISFARI\Downloads\adwcleaner.exe 2014-01-30 13:24 - 2014-01-30 13:24 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-01-30 13:24 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-01-30 13:23 - 2014-01-30 13:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ADDISFARI\Downloads\mbam-setup-1.75.0.1300(1).exe 2014-01-30 13:15 - 2014-01-30 13:15 - 01037068 _____ (Thisisu) C:\Users\ADDISFARI\Downloads\JRT.exe 2014-01-29 23:43 - 2014-01-29 23:43 - 00059158 _____ () C:\Users\ADDISFARI\Downloads\Addition.txt 2014-01-29 23:42 - 2014-02-09 17:38 - 00034030 _____ () C:\Users\ADDISFARI\Downloads\FRST.txt 2014-01-29 23:42 - 2014-02-09 17:38 - 00000000 ____D () C:\FRST 2014-01-29 23:41 - 2014-01-29 23:41 - 01137152 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST.exe 2014-01-29 23:02 - 2014-01-29 23:02 - 00113832 _____ () C:\Users\ADDISFARI\Downloads\Extras.Txt 2014-01-29 23:01 - 2014-01-29 23:01 - 00207958 _____ () C:\Users\ADDISFARI\Downloads\OTL.Txt 2014-01-29 22:51 - 2014-01-29 22:51 - 00602112 _____ (OldTimer Tools) C:\Users\ADDISFARI\Downloads\OTL.exe 2014-01-29 22:22 - 2014-01-29 22:23 - 00614784 _____ (Chip Digital GmbH) C:\Users\ADDISFARI\Downloads\HijackThis - CHIP-Downloader.exe 2014-01-29 11:38 - 2014-01-29 12:57 - 00000000 ____D () C:\Program Files\stinger 2014-01-29 10:30 - 2014-02-06 18:39 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\reggae NEW 2014 2014-01-28 18:37 - 2014-01-28 18:37 - 00427218 _____ () C:\Users\ADDISFARI\Downloads\xp-AntiSpy_setup-deutsch3982.exe 2014-01-28 18:34 - 2013-06-23 12:26 - 00018343 _____ () C:\Users\ADDISFARI\Desktop\whatsnew.txt 2014-01-28 18:34 - 2013-02-18 17:05 - 00001518 _____ () C:\Users\ADDISFARI\Desktop\license.txt 2014-01-28 18:26 - 2014-02-09 13:10 - 00003499 _____ () C:\windows\setupact.log 2014-01-28 18:26 - 2014-01-28 18:26 - 00000000 _____ () C:\windows\setuperr.log 2014-01-28 18:25 - 2014-01-28 18:26 - 00535464 _____ () C:\windows\system32\FNTCACHE.DAT 2014-01-28 18:04 - 2014-02-02 16:44 - 00158632 _____ () C:\Users\ADDISFARI\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-28 17:18 - 2014-01-28 17:18 - 00000000 ____D () C:\Program Files\PrivaZer 2014-01-28 17:17 - 2014-01-28 17:18 - 07157896 _____ (Goversoft LLC) C:\Users\ADDISFARI\Downloads\privazer_free(3).exe 2014-01-28 15:56 - 2014-01-28 15:57 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\Neuer Ordner 2014-01-28 14:26 - 2014-01-28 15:00 - 00000000 ____D () C:\windows\455F074C814E4520B69B5584BD90400C.TMP 2014-01-28 14:24 - 2014-01-28 14:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADDISFARI\Downloads\sh-remover.exe 2014-01-28 03:26 - 2014-01-28 03:26 - 00003443 _____ () C:\Users\ADDISFARI\Desktop\gegen gewalt.txt 2014-01-28 00:06 - 2014-02-02 23:48 - 00000000 ____D () C:\Program Files\ESET 2014-01-28 00:04 - 2014-01-28 00:04 - 02800104 _____ (AVAST Software) C:\Users\ADDISFARI\Downloads\avast-browser-cleanup.exe 2014-01-28 00:02 - 2014-01-28 00:02 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\rkill.exe 2014-01-27 23:22 - 2014-01-27 23:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ADDISFARI\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-27 22:58 - 2014-01-28 12:51 - 00000000 ____D () C:\ProgramData\IePluginService 2014-01-26 22:19 - 2014-01-26 22:19 - 00000218 _____ () C:\Users\ADDISFARI\AppData\Local\recently-used.xbel 2014-01-24 10:02 - 2014-01-24 10:02 - 00000319 _____ () C:\windows\game.ini 2014-01-24 09:48 - 2014-01-24 09:48 - 00000000 ____D () C:\Program Files\Activision 2014-01-24 09:45 - 2014-01-28 12:51 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\pc gämes 2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2014-01-23 00:54 - 2014-02-02 23:48 - 00000000 ____D () C:\Program Files\Spyware Terminator 2014-01-23 00:54 - 2011-06-21 11:24 - 00032768 _____ () C:\windows\system32\Drivers\sp_rsdrv2.sys 2014-01-23 00:53 - 2014-01-23 00:53 - 05049344 _____ (Crawler.com ) C:\Users\ADDISFARI\Downloads\SpywareTerminatorSetup_3.0.0.82.exe 2014-01-21 18:04 - 2014-01-21 18:04 - 00000000 ____D () C:\windows\Repair 2014-01-21 14:36 - 2014-01-21 14:36 - 00921000 _____ (Oracle Corporation) C:\Users\ADDISFARI\Downloads\jxpiinstall(4).exe 2014-01-21 10:21 - 2014-01-21 10:41 - 00000000 ____D () C:\Users\ADDISFARI\Documents\VX-Software 9 2014-01-21 10:04 - 2014-01-21 10:04 - 00000000 ____D () C:\Program Files\VX-Software 9 2014-01-21 10:04 - 2014-01-21 10:04 - 00000000 ____D () C:\IExp1.tmp 2014-01-21 10:03 - 2014-01-21 10:04 - 00000000 ___HD () C:\windows\msdownld.tmp 2014-01-21 10:03 - 2014-01-21 10:04 - 00000000 ____D () C:\windows\RegisteredPackages 2014-01-21 10:03 - 2014-01-21 10:03 - 00000000 ____D () C:\IExp0.tmp 2014-01-21 10:02 - 2014-01-21 10:02 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WMV9 VCM 2014-01-21 10:02 - 2014-01-21 10:02 - 00000000 ____D () C:\Program Files\WMV9_VCM 2014-01-21 10:01 - 2014-01-21 10:02 - 03507016 _____ (VISITX B.V. ) C:\Users\ADDISFARI\Downloads\VX-Software.Latest.Setup.exe 2014-01-20 17:54 - 2014-01-20 18:10 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\conexionmusical,lena,tapete&friends 2014-01-20 14:16 - 2014-01-20 14:16 - 22960416 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv32.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 17560352 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 10471712 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-01-20 14:16 - 2014-01-20 14:16 - 09700224 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 09657464 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 02947872 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 02747680 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01049888 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco3233221.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00893728 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco3233221.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00852768 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00847648 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00018439 _____ () C:\windows\system32\nvinfo.pb 2014-01-20 14:15 - 2014-01-20 14:15 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-01-20 14:15 - 2014-01-20 14:15 - 00000000 ____D () C:\Program Files\Synaptics 2014-01-20 14:14 - 2014-01-20 14:19 - 00000000 ____D () C:\DrvInstall 2014-01-20 14:14 - 2014-01-20 14:14 - 01629040 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01011.dll 2014-01-20 14:14 - 2014-01-20 14:14 - 00027888 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-01-20 13:34 - 2014-01-20 13:34 - 00000000 ____D () C:\Users\ADDISFARI\Documents\CAPCOM 2014-01-20 13:01 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_4.dll 2014-01-20 13:01 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_4.dll 2014-01-20 13:01 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_6.dll 2014-01-20 13:01 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_41.dll 2014-01-20 13:01 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_40.dll 2014-01-20 13:01 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_40.dll 2014-01-20 13:01 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_40.dll 2014-01-20 13:01 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_39.dll 2014-01-20 13:01 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_39.dll 2014-01-20 13:01 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_39.dll 2014-01-20 13:01 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_1.dll 2014-01-20 13:01 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_1.dll 2014-01-20 13:01 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_0.dll 2014-01-20 13:01 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_4.dll 2014-01-20 13:01 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_38.dll 2014-01-20 13:01 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_38.dll 2014-01-20 13:01 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_38.dll 2014-01-20 13:01 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_0.dll 2014-01-20 13:01 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_0.dll 2014-01-20 13:01 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_3.dll 2014-01-20 13:01 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_10.dll 2014-01-20 13:01 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_2.dll 2014-01-20 13:01 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_36.dll 2014-01-20 13:01 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_36.dll 2014-01-20 13:01 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_36.dll 2014-01-20 13:01 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_9.dll 2014-01-20 13:01 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_35.dll 2014-01-20 13:01 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_35.dll 2014-01-20 13:01 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_8.dll 2014-01-20 13:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_34.dll 2014-01-20 13:01 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_34.dll 2014-01-20 13:01 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_34.dll 2014-01-20 13:00 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_7.dll 2014-01-20 13:00 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_33.dll 2014-01-20 13:00 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_33.dll 2014-01-20 13:00 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_33.dll 2014-01-20 13:00 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\windows\system32\x3daudio1_1.dll 2014-01-20 13:00 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_6.dll 2014-01-20 13:00 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_5.dll 2014-01-20 13:00 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\windows\system32\d3dx10.dll 2014-01-20 13:00 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_4.dll 2014-01-20 13:00 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_3.dll 2014-01-20 13:00 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\windows\system32\xinput1_2.dll 2014-01-20 13:00 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_2.dll 2014-01-20 12:43 - 2014-01-20 12:43 - 00000000 ____D () C:\Program Files\CAPCOM 2014-01-20 03:44 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_37.dll 2014-01-20 03:43 - 2014-01-20 03:44 - 00000000 ____D () C:\Program Files\Microsoft Games for Windows - LIVE 2014-01-20 03:43 - 2014-01-20 03:43 - 00000000 ____D () C:\windows\system32\xlive 2014-01-20 03:43 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_37.dll 2014-01-20 03:43 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_37.dll 2014-01-18 17:34 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll 2014-01-18 17:34 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\windows\system32\javaws.exe 2014-01-18 17:34 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\windows\system32\javaw.exe 2014-01-18 17:34 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\windows\system32\java.exe 2014-01-18 17:30 - 2014-01-18 17:30 - 00921000 _____ (Oracle Corporation) C:\Users\ADDISFARI\Downloads\jxpiinstall(3).exe 2014-01-17 16:36 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys 2014-01-17 16:36 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-01-17 16:35 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys 2014-01-17 16:35 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys 2014-01-13 10:39 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-01-13 10:39 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-01-13 10:39 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-01-13 10:39 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-01-13 10:39 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-01-13 10:39 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-01-13 10:39 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-01-13 10:39 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-01-13 10:39 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-01-13 10:39 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-01-13 10:39 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-01-13 10:39 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-01-13 10:39 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-01-13 10:39 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-01-13 10:39 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-01-13 10:39 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-01-13 10:39 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-01-13 10:39 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-01-13 10:39 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-01-11 22:10 - 2014-01-11 22:10 - 01467844 _____ () C:\Users\ADDISFARI\Downloads\ubuntu [1].exe 2014-01-11 18:23 - 2014-01-11 18:35 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-11 18:23 - 2014-01-11 18:28 - 00000000 ____D () C:\ProgramData\AVG 2014-01-11 18:17 - 2014-01-11 18:20 - 78353832 _____ (AVG) C:\Users\ADDISFARI\Downloads\avg_tuh_stf_all_2014_295_24c34.exe 2014-01-11 18:05 - 2014-01-11 18:26 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\AVG 2014-01-11 13:18 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL 2014-01-11 13:18 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 01051136 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00645120 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat 2014-01-11 13:14 - 2014-01-11 13:14 - 00610304 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00523776 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00454656 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00367104 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\html.iec 2014-01-11 13:14 - 2014-01-11 13:14 - 00244736 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00238288 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00233472 _____ (Microsoft Corporation) C:\windows\system32\url.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00208384 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00182272 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00151552 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\occache.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00083456 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx 2014-01-11 13:14 - 2014-01-11 13:14 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-01-11 13:13 - 2014-01-11 13:13 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-01-11 13:13 - 2014-01-11 13:13 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll 2014-01-10 20:28 - 2014-01-10 20:31 - 27993480 _____ () C:\Users\ADDISFARI\Downloads\fear of existence - ten reasons to die (2010).zip 2014-01-10 20:21 - 2014-01-10 20:22 - 11622114 _____ () C:\Users\ADDISFARI\Downloads\political terror - bastard beings (2010).rar 2014-01-10 14:35 - 2014-01-10 14:49 - 00000000 ____D () C:\windows\46B04D534E344388B6EE80FAB66AEF9B.TMP 2014-01-10 14:22 - 2014-01-11 18:05 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-10 14:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll 2014-01-10 14:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2014-01-10 14:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\credui.dll 2014-01-10 14:14 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll 2014-01-10 14:14 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys 2014-01-10 14:14 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys 2014-01-10 14:13 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll 2014-01-10 14:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2014-01-10 14:13 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll 2014-01-10 14:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll 2014-01-10 14:13 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx 2014-01-10 14:13 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll 2014-01-10 14:13 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe 2014-01-10 14:13 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe 2014-01-10 14:13 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2014-01-10 14:13 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys 2014-01-10 14:13 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2014-01-10 14:13 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll 2014-01-10 14:13 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll 2014-01-10 14:13 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-01-10 14:13 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll 2014-01-10 14:13 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe 2014-01-10 14:13 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll 2014-01-10 14:13 - 2013-08-29 02:12 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbser.sys 2014-01-10 14:13 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll 2014-01-10 14:13 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys 2014-01-10 14:13 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-01-10 14:13 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys 2014-01-10 14:13 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll 2014-01-10 14:13 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll 2014-01-10 14:13 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll 2014-01-10 14:13 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2014-01-10 14:13 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2014-01-10 14:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll 2014-01-10 14:12 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL 2014-01-10 14:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL 2014-01-10 14:12 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2014-01-10 14:12 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys 2014-01-10 14:12 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys 2014-01-10 14:12 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2014-01-10 14:12 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys 2014-01-10 14:12 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys 2014-01-10 14:12 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys 2014-01-10 14:12 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll 2014-01-10 14:12 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll 2014-01-10 14:12 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys 2014-01-10 14:12 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys 2014-01-10 13:47 - 2014-01-10 13:52 - 00000000 ____D () C:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP 2014-01-10 10:05 - 2014-01-10 10:05 - 00000000 ____D () C:\Program Files\Enigma Software Group ==================== One Month Modified Files and Folders ======= 2014-02-09 17:38 - 2014-01-29 23:42 - 00034030 _____ () C:\Users\ADDISFARI\Downloads\FRST.txt 2014-02-09 17:38 - 2014-01-29 23:42 - 00000000 ____D () C:\FRST 2014-02-09 17:37 - 2014-02-09 17:37 - 01138688 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST(2).exe 2014-02-09 17:34 - 2012-04-10 02:08 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-02-09 17:32 - 2011-12-20 16:52 - 00000000 ____D () C:\ProgramData\MFAData 2014-02-09 16:51 - 2013-05-17 21:34 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-09 14:24 - 2012-03-12 14:24 - 00000310 _____ () C:\windows\Tasks\MT66 Software Update.job 2014-02-09 13:18 - 2009-07-14 05:34 - 00018736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-09 13:18 - 2009-07-14 05:34 - 00018736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-09 13:11 - 2014-01-07 17:16 - 00000280 _____ () C:\windows\Tasks\Driver Booster Update.job 2014-02-09 13:11 - 2011-02-04 18:57 - 00000000 ____D () C:\Program Files\Steam 2014-02-09 13:10 - 2014-02-09 13:10 - 00000022 _____ () C:\windows\S.dirmngr 2014-02-09 13:10 - 2014-02-05 23:57 - 00000508 _____ () C:\windows\Tasks\Malwarebytes Anti-Exploit.job 2014-02-09 13:10 - 2014-01-28 18:26 - 00003499 _____ () C:\windows\setupact.log 2014-02-09 13:10 - 2013-05-17 21:34 - 00001100 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-09 13:10 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-02-09 13:03 - 2009-10-10 06:17 - 01392869 _____ () C:\windows\WindowsUpdate.log 2014-02-09 13:02 - 2013-09-06 21:51 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\uTorrent 2014-02-09 11:10 - 2014-02-09 11:10 - 01059584 _____ () C:\Users\ADDISFARI\Downloads\Assassin's-Creed-2-Setup.exe 2014-02-09 11:07 - 2014-02-09 11:07 - 01059584 _____ () C:\Users\ADDISFARI\Downloads\Assassin's-Creed_-Brotherhood-Setup.exe 2014-02-09 02:07 - 2014-02-09 02:07 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner(2).exe 2014-02-09 02:07 - 2014-01-30 13:36 - 00001820 _____ () C:\sc-cleaner.txt 2014-02-08 22:55 - 2009-12-10 11:52 - 00000000 ___RD () C:\Users\ADDISFARI\Desktop\FOTOS 2014-02-08 12:52 - 2014-02-08 12:49 - 50739220 _____ () C:\Users\ADDISFARI\Desktop\Rote Flora Eskalation in Hamburg 21.12.13.avi 2014-02-08 01:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\LogFiles 2014-02-08 01:26 - 2014-02-08 01:26 - 00013501 _____ () C:\Users\ADDISFARI\Downloads\CuOMHP14.part1.rar 2014-02-07 23:10 - 2013-11-16 10:37 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\JETZT-JETZT-JETZT 2014-02-07 19:13 - 2011-07-16 12:02 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\Programmens 2014-02-07 15:33 - 2014-02-07 15:32 - 00259584 _____ (OldTimer Tools) C:\Users\ADDISFARI\Downloads\OTH.scr 2014-02-07 14:48 - 2012-05-05 17:13 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-07 13:23 - 2014-02-04 19:00 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\lovesongs new 2014-02-07 13:17 - 2011-04-22 12:26 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\vlc 2014-02-06 18:39 - 2014-01-29 10:30 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\reggae NEW 2014 2014-02-06 13:07 - 2014-02-06 13:07 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_nnfwdk_01009.Wdf 2014-02-06 13:00 - 2014-02-06 13:00 - 02750688 _____ (The Nielsen Company) C:\Users\ADDISFARI\Downloads\netsight_setup_6.1.0.11_MP_Production_mid51063961049_p.exe 2014-02-06 13:00 - 2014-02-06 13:00 - 00000878 _____ () C:\nsinst.log 2014-02-06 13:00 - 2014-02-06 13:00 - 00000000 ____D () C:\Program Files\NetRatingsNetSight 2014-02-06 12:18 - 2013-12-20 22:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-06 12:17 - 2013-11-16 00:08 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak 2014-02-06 12:17 - 2013-07-23 18:48 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\anti virus tools 2014-02-05 23:58 - 2014-02-05 23:53 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit 2014-02-05 23:56 - 2014-02-05 23:56 - 01769928 _____ (Malwarebytes ) C:\Users\ADDISFARI\Downloads\mbae-setup-0.09.5.1000(1).exe 2014-02-05 23:53 - 2014-02-05 23:53 - 01769928 _____ (Malwarebytes ) C:\Users\ADDISFARI\Downloads\mbae-setup-0.09.5.1000.exe 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\SUPERAntiSpyware.com 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com 2014-02-05 22:43 - 2014-02-05 22:43 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware 2014-02-05 22:43 - 2014-02-05 22:42 - 29393568 _____ (SUPERAntiSpyware) C:\Users\ADDISFARI\Downloads\SUPERAntiSpyware.exe 2014-02-05 19:34 - 2012-04-10 02:08 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe 2014-02-05 19:34 - 2011-05-19 05:47 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl 2014-02-05 12:16 - 2009-09-15 15:07 - 00006462 _____ () C:\windows\system32\PerfStringBackup.INI 2014-02-04 20:57 - 2014-01-30 18:05 - 00046006 _____ () C:\windows\PFRO.log 2014-02-04 20:41 - 2014-02-04 20:41 - 05192704 _____ (Geza Kovacs) C:\Users\ADDISFARI\Downloads\unetbootin-windows-585.exe 2014-02-04 20:23 - 2014-02-04 20:23 - 00000839 _____ () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-02-04 20:21 - 2014-02-04 20:21 - 00037482 _____ () C:\Users\ADDISFARI\Downloads\debian-live-7.2-amd64-xfce-desktop.iso.torrent 2014-02-04 20:18 - 2014-02-04 20:18 - 01307736 _____ (BitTorrent Inc.) C:\Users\ADDISFARI\Downloads\utorrent.exe 2014-02-04 20:16 - 2014-02-04 20:13 - 00000000 ____D () C:\dasi 2014-02-04 15:11 - 2013-08-30 09:47 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2014-02-04 15:10 - 2010-01-26 12:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-02-04 14:59 - 2014-02-04 14:59 - 00614784 _____ (Chip Digital GmbH) C:\Users\ADDISFARI\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-02-04 14:58 - 2013-08-30 10:27 - 00001176 _____ () C:\windows\wininit.ini 2014-02-04 14:39 - 2014-02-04 14:39 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\LavasoftStatistics 2014-02-04 14:25 - 2014-02-04 14:25 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\bilder sms 2014-02-04 14:05 - 2014-02-04 14:05 - 00000000 ____D () C:\Program Files\Lavasoft 2014-02-04 14:03 - 2014-02-04 14:03 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Lavasoft 2014-02-04 14:03 - 2014-02-04 14:03 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft 2014-02-04 14:02 - 2014-02-04 14:02 - 01725064 _____ () C:\Users\ADDISFARI\Downloads\Adaware_Installer_11.1.exe 2014-02-04 14:02 - 2014-02-04 14:02 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-02-04 14:00 - 2014-02-04 14:00 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\logfiles trojaner-info.de 2014-02-03 18:21 - 2014-02-03 18:21 - 00000000 ____D () C:\ProgramData\Licenses 2014-02-03 17:26 - 2014-02-03 17:26 - 00000000 ____D () C:\Users\ADDISFARI\Documents\Simply Super Software 2014-02-03 17:26 - 2014-02-03 17:26 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Simply Super Software 2014-02-03 17:25 - 2014-02-03 17:25 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-02-03 17:25 - 2014-02-03 17:25 - 00000000 ____D () C:\Program Files\Trojan Remover 2014-02-03 17:18 - 2014-02-03 17:17 - 21407864 _____ (Simply Super Software ) C:\Users\ADDISFARI\Downloads\trjsetup690.exe 2014-02-03 17:11 - 2014-02-03 17:11 - 00000000 ____D () C:\ProgramData\GridinSoft 2014-02-03 17:10 - 2014-02-03 17:08 - 42070072 _____ (GridinSoft LLC) C:\Users\ADDISFARI\Downloads\gtk-2.2.1.3-setup.exe 2014-02-03 16:40 - 2014-02-03 16:40 - 01137152 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST(1).exe 2014-02-03 16:38 - 2014-02-03 16:38 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner(1).exe 2014-02-03 16:35 - 2009-07-14 05:52 - 00000000 ____D () C:\windows\twain_32 2014-02-03 12:18 - 2010-04-15 00:32 - 00000000 ____D () C:\ProgramData\DivX 2014-02-03 12:18 - 2010-02-13 20:21 - 00000000 ____D () C:\Program Files\DivX 2014-02-03 12:18 - 2010-02-13 20:21 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared 2014-02-03 12:17 - 2010-02-28 13:25 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\DivX 2014-02-03 12:12 - 2014-02-03 12:12 - 00000000 _____ () C:\END 2014-02-02 23:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\wfp 2014-02-02 23:48 - 2014-01-28 00:06 - 00000000 ____D () C:\Program Files\ESET 2014-02-02 23:48 - 2014-01-23 00:54 - 00000000 ____D () C:\Program Files\Spyware Terminator 2014-02-02 23:48 - 2012-05-28 20:15 - 00000000 ____D () C:\windows\de 2014-02-02 23:48 - 2012-03-10 21:44 - 00000000 ____D () C:\Users\Public\Documents\Pinnacle 2014-02-02 23:48 - 2010-01-26 12:18 - 00000000 ____D () C:\Program Files\Windows Live 2014-02-02 23:48 - 2010-01-26 07:36 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Winamp 2014-02-02 23:48 - 2009-11-26 22:42 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-02-02 23:48 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\registration 2014-02-02 23:48 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET 2014-02-02 23:47 - 2010-01-26 07:45 - 00000000 ____D () C:\ProgramData\Real 2014-02-02 16:49 - 2012-03-06 13:25 - 00000000 __SHD () C:\Users\ADDISFARI\Desktop\briefimages 2014-02-02 16:44 - 2014-01-28 18:04 - 00158632 _____ () C:\Users\ADDISFARI\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-02 15:03 - 2009-11-26 22:42 - 00000000 ____D () C:\Users\ADDISFARI 2014-02-01 22:14 - 2010-11-21 21:34 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Paint.NET 2014-02-01 22:01 - 2014-02-01 22:01 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\NVIDIA 2014-02-01 22:01 - 2014-02-01 22:00 - 00000000 ____D () C:\ProgramData\Pinnacle VideoSpin 2014-02-01 22:00 - 2014-02-01 22:00 - 00000000 ____D () C:\Program Files\Pinnacle 2014-02-01 21:58 - 2012-01-27 00:26 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Downloaded Installations 2014-02-01 21:50 - 2014-02-01 21:50 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\SearchProtect 2014-01-31 09:28 - 2014-01-31 09:28 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive 2014-01-31 00:42 - 2010-11-17 07:42 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Windows Live 2014-01-30 22:38 - 2014-01-30 22:37 - 02347384 _____ (ESET) C:\Users\ADDISFARI\Downloads\esetsmartinstaller_enu.exe 2014-01-30 18:17 - 2014-01-30 18:08 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Avg2014 2014-01-30 18:15 - 2014-01-30 18:15 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\AVG2014 2014-01-30 18:15 - 2013-10-23 11:20 - 00000000 ____D () C:\ProgramData\AVG2014 2014-01-30 18:13 - 2014-01-30 18:13 - 00000000 ___HD () C:\$AVG 2014-01-30 16:06 - 2014-01-30 15:50 - 271747771 _____ () C:\Users\ADDISFARI\Downloads\LMS-Reality_Check-CD-FLAC-1999-BOCKSCAR.rar 2014-01-30 15:34 - 2014-01-30 15:15 - 57596361 _____ () C:\Users\ADDISFARI\Downloads\LMS_Reality_Check_CD_FLAC_1999_BOCKSCAR.part2.rar 2014-01-30 13:36 - 2014-01-30 13:36 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\sc-cleaner.exe 2014-01-30 13:36 - 2013-10-21 11:23 - 00001041 _____ () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-01-30 13:36 - 2009-11-26 22:43 - 00001160 _____ () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-30 13:30 - 2013-12-14 10:00 - 00000000 ____D () C:\AdwCleaner 2014-01-30 13:28 - 2014-01-30 13:28 - 01166132 _____ () C:\Users\ADDISFARI\Downloads\adwcleaner.exe 2014-01-30 13:24 - 2014-01-30 13:24 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-01-30 13:24 - 2014-01-30 13:23 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ADDISFARI\Downloads\mbam-setup-1.75.0.1300(1).exe 2014-01-30 13:15 - 2014-01-30 13:15 - 01037068 _____ (Thisisu) C:\Users\ADDISFARI\Downloads\JRT.exe 2014-01-29 23:43 - 2014-01-29 23:43 - 00059158 _____ () C:\Users\ADDISFARI\Downloads\Addition.txt 2014-01-29 23:41 - 2014-01-29 23:41 - 01137152 _____ (Farbar) C:\Users\ADDISFARI\Downloads\FRST.exe 2014-01-29 23:02 - 2014-01-29 23:02 - 00113832 _____ () C:\Users\ADDISFARI\Downloads\Extras.Txt 2014-01-29 23:01 - 2014-01-29 23:01 - 00207958 _____ () C:\Users\ADDISFARI\Downloads\OTL.Txt 2014-01-29 22:51 - 2014-01-29 22:51 - 00602112 _____ (OldTimer Tools) C:\Users\ADDISFARI\Downloads\OTL.exe 2014-01-29 22:23 - 2014-01-29 22:22 - 00614784 _____ (Chip Digital GmbH) C:\Users\ADDISFARI\Downloads\HijackThis - CHIP-Downloader.exe 2014-01-29 12:57 - 2014-01-29 11:38 - 00000000 ____D () C:\Program Files\stinger 2014-01-28 18:44 - 2010-01-25 16:42 - 00000979 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-28 18:37 - 2014-01-28 18:37 - 00427218 _____ () C:\Users\ADDISFARI\Downloads\xp-AntiSpy_setup-deutsch3982.exe 2014-01-28 18:26 - 2014-01-28 18:26 - 00000000 _____ () C:\windows\setuperr.log 2014-01-28 18:26 - 2014-01-28 18:25 - 00535464 _____ () C:\windows\system32\FNTCACHE.DAT 2014-01-28 17:43 - 2013-09-23 00:28 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\PrivaZer 2014-01-28 17:39 - 2010-01-23 15:48 - 00000000 ____D () C:\windows\Minidump 2014-01-28 17:18 - 2014-01-28 17:18 - 00000000 ____D () C:\Program Files\PrivaZer 2014-01-28 17:18 - 2014-01-28 17:17 - 07157896 _____ (Goversoft LLC) C:\Users\ADDISFARI\Downloads\privazer_free(3).exe 2014-01-28 15:57 - 2014-01-28 15:56 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\Neuer Ordner 2014-01-28 15:00 - 2014-01-28 14:26 - 00000000 ____D () C:\windows\455F074C814E4520B69B5584BD90400C.TMP 2014-01-28 14:26 - 2013-07-04 01:06 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2014-01-28 14:24 - 2014-01-28 14:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADDISFARI\Downloads\sh-remover.exe 2014-01-28 14:22 - 2013-10-21 00:40 - 00001316 _____ () C:\Users\ADDISFARI\Desktop\Mozilla Firefox.lnk 2014-01-28 12:51 - 2014-01-27 22:58 - 00000000 ____D () C:\ProgramData\IePluginService 2014-01-28 12:51 - 2014-01-24 09:45 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\pc gämes 2014-01-28 12:51 - 2009-09-15 14:55 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-01-28 03:26 - 2014-01-28 03:26 - 00003443 _____ () C:\Users\ADDISFARI\Desktop\gegen gewalt.txt 2014-01-28 03:25 - 2011-09-14 00:09 - 00000000 ____D () C:\Program Files\SIW 2014-01-28 00:04 - 2014-01-28 00:04 - 02800104 _____ (AVAST Software) C:\Users\ADDISFARI\Downloads\avast-browser-cleanup.exe 2014-01-28 00:02 - 2014-01-28 00:02 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\ADDISFARI\Downloads\rkill.exe 2014-01-27 23:22 - 2014-01-27 23:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\ADDISFARI\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-27 23:01 - 2009-12-03 10:55 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Adobe 2014-01-27 19:42 - 2013-10-21 18:29 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\Spotify 2014-01-26 22:19 - 2014-01-26 22:19 - 00000218 _____ () C:\Users\ADDISFARI\AppData\Local\recently-used.xbel 2014-01-24 10:02 - 2014-01-24 10:02 - 00000319 _____ () C:\windows\game.ini 2014-01-24 09:48 - 2014-01-24 09:48 - 00000000 ____D () C:\Program Files\Activision 2014-01-24 09:45 - 2009-11-26 22:42 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Local\VirtualStore 2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2014-01-23 00:53 - 2014-01-23 00:53 - 05049344 _____ (Crawler.com ) C:\Users\ADDISFARI\Downloads\SpywareTerminatorSetup_3.0.0.82.exe 2014-01-22 21:15 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\rescache 2014-01-21 18:04 - 2014-01-21 18:04 - 00000000 ____D () C:\windows\Repair 2014-01-21 16:42 - 2013-11-13 10:16 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\download any 2014-01-21 16:36 - 2013-06-18 00:05 - 00000000 ____D () C:\Program Files\StreamTransport 2014-01-21 14:36 - 2014-01-21 14:36 - 00921000 _____ (Oracle Corporation) C:\Users\ADDISFARI\Downloads\jxpiinstall(4).exe 2014-01-21 10:41 - 2014-01-21 10:21 - 00000000 ____D () C:\Users\ADDISFARI\Documents\VX-Software 9 2014-01-21 10:04 - 2014-01-21 10:04 - 00000000 ____D () C:\Program Files\VX-Software 9 2014-01-21 10:04 - 2014-01-21 10:04 - 00000000 ____D () C:\IExp1.tmp 2014-01-21 10:04 - 2014-01-21 10:03 - 00000000 ___HD () C:\windows\msdownld.tmp 2014-01-21 10:04 - 2014-01-21 10:03 - 00000000 ____D () C:\windows\RegisteredPackages 2014-01-21 10:03 - 2014-01-21 10:03 - 00000000 ____D () C:\IExp0.tmp 2014-01-21 10:02 - 2014-01-21 10:02 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WMV9 VCM 2014-01-21 10:02 - 2014-01-21 10:02 - 00000000 ____D () C:\Program Files\WMV9_VCM 2014-01-21 10:02 - 2014-01-21 10:01 - 03507016 _____ (VISITX B.V. ) C:\Users\ADDISFARI\Downloads\VX-Software.Latest.Setup.exe 2014-01-21 02:28 - 2011-01-08 01:41 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Skype 2014-01-20 18:10 - 2014-01-20 17:54 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\conexionmusical,lena,tapete&friends 2014-01-20 15:29 - 2014-01-07 17:16 - 00000000 ____D () C:\ProgramData\IObit 2014-01-20 14:19 - 2014-01-20 14:14 - 00000000 ____D () C:\DrvInstall 2014-01-20 14:18 - 2009-10-10 06:24 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-01-20 14:16 - 2014-01-20 14:16 - 22960416 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv32.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 17560352 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 10471712 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys 2014-01-20 14:16 - 2014-01-20 14:16 - 09700224 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 09657464 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 02947872 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 02747680 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvenc.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01049888 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco3233221.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00893728 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco3233221.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00852768 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00847648 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 00018439 _____ () C:\windows\system32\nvinfo.pb 2014-01-20 14:16 - 2009-10-10 06:16 - 15877216 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2um.dll 2014-01-20 14:16 - 2009-10-10 06:16 - 15230352 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dum.dll 2014-01-20 14:16 - 2009-10-10 06:16 - 02698272 _____ (NVIDIA Corporation) C:\windows\system32\nvapi.dll 2014-01-20 14:15 - 2014-01-20 14:15 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-01-20 14:15 - 2014-01-20 14:15 - 00000000 ____D () C:\Program Files\Synaptics 2014-01-20 14:14 - 2014-01-20 14:14 - 01629040 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01011.dll 2014-01-20 14:14 - 2014-01-20 14:14 - 00027888 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys 2014-01-20 13:34 - 2014-01-20 13:34 - 00000000 ____D () C:\Users\ADDISFARI\Documents\CAPCOM 2014-01-20 12:43 - 2014-01-20 12:43 - 00000000 ____D () C:\Program Files\CAPCOM 2014-01-20 03:44 - 2014-01-20 03:43 - 00000000 ____D () C:\Program Files\Microsoft Games for Windows - LIVE 2014-01-20 03:43 - 2014-01-20 03:43 - 00000000 ____D () C:\windows\system32\xlive 2014-01-18 17:34 - 2013-11-11 13:48 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-18 17:34 - 2010-01-25 17:00 - 00000000 ____D () C:\Program Files\Java 2014-01-18 17:30 - 2014-01-18 17:30 - 00921000 _____ (Oracle Corporation) C:\Users\ADDISFARI\Downloads\jxpiinstall(3).exe 2014-01-18 07:44 - 2011-07-08 20:31 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\gnupg 2014-01-18 02:13 - 2011-07-05 19:37 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\TrueCrypt 2014-01-17 12:26 - 2010-06-02 17:27 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\VSO 2014-01-15 19:02 - 2010-05-07 13:52 - 00000000 ____D () C:\Program Files\AVG 2014-01-15 18:58 - 2009-07-14 03:04 - 00000010 __RSH () C:\config.sys 2014-01-15 18:10 - 2010-01-26 12:32 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2014-01-15 11:48 - 2013-03-25 12:29 - 00000000 ___RD () C:\Users\ADDISFARI\Desktop\SOUND 2014-01-15 04:35 - 2009-09-15 15:02 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-01-15 04:34 - 2013-07-29 03:54 - 00000000 ____D () C:\windows\system32\MRT 2014-01-15 04:28 - 2009-12-03 10:52 - 83425928 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-01-13 13:02 - 2009-07-29 11:27 - 00000000 ____D () C:\windows\Panther 2014-01-12 08:13 - 2014-01-30 15:36 - 33952652 _____ () C:\Users\ADDISFARI\Downloads\04-lms-sound_in_the_air.flac 2014-01-11 22:10 - 2014-01-11 22:10 - 01467844 _____ () C:\Users\ADDISFARI\Downloads\ubuntu [1].exe 2014-01-11 20:35 - 2009-07-14 05:53 - 00032632 _____ () C:\windows\Tasks\SCHEDLGU.TXT 2014-01-11 18:35 - 2014-01-11 18:23 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-11 18:28 - 2014-01-11 18:23 - 00000000 ____D () C:\ProgramData\AVG 2014-01-11 18:26 - 2014-01-11 18:05 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\AVG 2014-01-11 18:20 - 2014-01-11 18:17 - 78353832 _____ (AVG) C:\Users\ADDISFARI\Downloads\avg_tuh_stf_all_2014_295_24c34.exe 2014-01-11 18:05 - 2014-01-10 14:22 - 00000000 ____D () C:\Users\ADDISFARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-11 13:47 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\de-DE 2014-01-11 13:14 - 2014-01-11 13:14 - 01051136 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00645120 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat 2014-01-11 13:14 - 2014-01-11 13:14 - 00610304 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00523776 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00454656 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00367104 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\html.iec 2014-01-11 13:14 - 2014-01-11 13:14 - 00244736 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00238288 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00233472 _____ (Microsoft Corporation) C:\windows\system32\url.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00208384 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00194048 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00182272 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00151552 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\occache.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00083456 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx 2014-01-11 13:14 - 2014-01-11 13:14 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll 2014-01-11 13:14 - 2014-01-11 13:14 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe 2014-01-11 13:14 - 2014-01-11 13:14 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2014-01-11 13:13 - 2014-01-11 13:13 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-01-11 13:13 - 2014-01-11 13:13 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll 2014-01-11 13:13 - 2014-01-11 13:13 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-01-11 13:13 - 2014-01-11 13:13 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll 2014-01-10 20:32 - 2014-01-09 11:26 - 00000000 ____D () C:\Users\ADDISFARI\Desktop\anarchist metal 2014-01-10 20:31 - 2014-01-10 20:28 - 27993480 _____ () C:\Users\ADDISFARI\Downloads\fear of existence - ten reasons to die (2010).zip 2014-01-10 20:22 - 2014-01-10 20:21 - 11622114 _____ () C:\Users\ADDISFARI\Downloads\political terror - bastard beings (2010).rar 2014-01-10 14:49 - 2014-01-10 14:35 - 00000000 ____D () C:\windows\46B04D534E344388B6EE80FAB66AEF9B.TMP 2014-01-10 14:37 - 2010-05-06 17:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-10 13:52 - 2014-01-10 13:47 - 00000000 ____D () C:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP 2014-01-10 10:05 - 2014-01-10 10:05 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-01-10 00:40 - 2013-08-30 22:55 - 00000000 ____D () C:\ProgramData\TuneUp Software Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.6736.dll Some content of TEMP: ==================== C:\Users\ADDISFARI\AppData\Local\Temp\drm_dyndata_7400006.dll C:\Users\ADDISFARI\AppData\Local\Temp\sdanircmdc.exe C:\Users\ADDISFARI\AppData\Local\Temp\sdapskill.exe C:\Users\ADDISFARI\AppData\Local\Temp\sdaspwn.exe ==================== Bamital & volsnap Check ================= C:\windows\explorer.exe => MD5 is legit C:\windows\system32\winlogon.exe => MD5 is legit C:\windows\system32\wininit.exe => MD5 is legit C:\windows\system32\svchost.exe => MD5 is legit C:\windows\system32\services.exe => MD5 is legit C:\windows\system32\User32.dll => MD5 is legit C:\windows\system32\userinit.exe => MD5 is legit C:\windows\system32\rpcss.dll => MD5 is legit C:\windows\system32\Drivers\volsnap.sys => MD5 is legit testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION! LastRegBack: 2014-02-08 04:32 ==================== End Of Log ============================ |
|
10.02.2014, 12:06
| #17 |
| /// the machine /// TB-Ausbilder    | Kann awesomehp.com nicht entfernen. Hier mein Logfile... Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.
__________________Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390859855&from=amt&uid=ST9320325AS_5VD1LZMRXXXX5VD1LZMR&q={searchTerms}
FF Homepage: https://www.google.de/?gws_rd=cr&ei=ytXoUuXMC4OEtAa344HgDQ
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP66906FF9-F222-41A7-A0A2-160A545EEE75&SSPV=
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Dann bitte den Rest von oben mit Onlinescan und so.
__________________ |
|
| Themen zu Kann awesomehp.com nicht entfernen. Hier mein Logfile... |
| awesomehp, awesomehp entfernen, converter, cyberghost, hijackthis, iepluginservice, internet explorer, lightning, pup.optional.conduit.a, pup.optional.searchprotect.a, pup.optional.surftastic.a, rundll, show-password, software, spyhunter, spyhunter entfernen, spyware, trojan.strictor, windows |
Linear-Darstellung
