|
Log-Analyse und Auswertung: Wörter sind doppelt blau untersrichenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
24.02.2014, 18:49 | #1 |
| Wörter sind doppelt blau untersrichen Hallo , seid ein paar Tagen sind manche Wörter auf meinem Laptop doppelt blau unterstrichen und wenn man draufkommt öffnen sich Fenster , des weiteren öffnen oder schließen sich die Fenster komplett von selbst ich habe keine Ahnung was ich mir vielleicht eingefangen habe oder wie es weggeht ich habe ein Scanprgramm durchlaufen lassen dieses fand aber keine großen Probleme wie bekomme ich meinen Laptop wieder so wie vorher hin ? Bitte um Hilfe |
24.02.2014, 19:33 | #2 |
/// the machine /// TB-Ausbilder | Wörter sind doppelt blau untersrichen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
24.02.2014, 20:22 | #3 |
| Wörter sind doppelt blau untersrichen FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-02-2014 Ran by Natrecia (administrator) on NATRECIA-VAIO on 24-02-2014 20:02:31 Running from C:\Users\Natrecia\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe () C:\Program Files (x86)\PC Beschleunigen\PCSUService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe () c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe () C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Program Files (x86)\SecretSauce\bin\utilSecretSauce.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe () C:\Users\Natrecia\AppData\Roaming\VOPackage\VOsrv.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Smartbar) C:\Users\Natrecia\AppData\Local\Smartbar\Application\SnapDo.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe (MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe () C:\Users\Natrecia\AppData\Roaming\BrowserCompanion\tbhcn.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Iminent) C:\Program Files (x86)\Iminent\Iminent.exe (Iminent) C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790176 2011-03-31] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\qttask.exe [77824 2011-08-08] (Apple Computer, Inc.) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [202296 2011-04-24] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe [1073784 2012-06-19] (Iminent) HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [884856 2012-06-19] (Iminent) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO) HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17417392 2012-07-03] (Skype Technologies S.A.) HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17417392 2012-07-03] (Skype Technologies S.A.) HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\Run: [PCSpeedUp] - C:\Program Files (x86)\PC Beschleunigen\PCSUNotifier.exe [188680 2012-06-05] () HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Natrecia\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\Run: [Browser Infrastructure Helper] - C:\Users\Natrecia\AppData\Local\Smartbar\Application\SnapDo.exe [21536 2013-10-31] (Smartbar) HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\MountPoints2: {6c64f22b-efda-11e2-ae40-78843ce3716a} - E:\Startme.exe HKU\S-1-5-21-2852138455-3582641976-1308445454-1000\...\MountPoints2: {6c64f2d6-efda-11e2-ae40-78843ce3716a} - E:\Autorun.exe Startup: C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) Startup: C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk ShortcutTarget: tbhcn.lnk -> C:\Users\Natrecia\AppData\Roaming\BrowserCompanion\tbhcn.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&q={searchTerms}&installDate=29/07/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=hp&installDate=29/07/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&q={searchTerms}&installDate=29/07/2013 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) URLSearchHook: HKLM-x32 - Winload Toolbar - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) URLSearchHook: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) URLSearchHook: HKLM-x32 - appbario6 Toolbar - {474dcbf4-0db1-4c6a-a014-1c2544e82698} - C:\Program Files (x86)\appbario6\prxtbappb.dll (Conduit Ltd.) StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&q={searchTerms}&installDate=29/07/2013 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3227980 SearchScopes: HKLM-x32 - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=&ref=toolbox&q={searchTerms} SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&q={searchTerms}&installDate=29/07/2013 SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&q={searchTerms}&installDate=29/07/2013 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K&q={searchTerms} BHO: MediaPlayerEnhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-bho64.dll (Feven) BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Browser Companion Helper - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( ) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: SecretSauce - {0ffd0ef2-dbe9-483a-80c4-d2c331da1ce4} - C:\Program Files (x86)\SecretSauce\SecretSauceBHO.dll (SecretSauce) BHO-x32: IEOptimizer - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SavingsBull\IEOptimizer.dll () BHO-x32: Savings Sidekick - {11111111-1111-1111-1111-110011501160} - C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.dll (215 Apps) BHO-x32: MediaPlayerEnhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-bho.dll (Feven) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) BHO-x32: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Winload Toolbar - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) BHO-x32: appbario6 Toolbar - {474dcbf4-0db1-4c6a-a014-1c2544e82698} - C:\Program Files (x86)\appbario6\prxtbappb.dll (Conduit Ltd.) BHO-x32: TBSB01620 Class - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll () BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files (x86)\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.) BHO-x32: Browser Companion Helper Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( ) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (Iminent) BHO-x32: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) Toolbar: HKLM-x32 - Winload Toolbar - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) Toolbar: HKLM-x32 - IMinent Toolbar - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll () Toolbar: HKLM-x32 - appbario6 Toolbar - {474dcbf4-0db1-4c6a-a014-1c2544e82698} - C:\Program Files (x86)\appbario6\prxtbappb.dll (Conduit Ltd.) Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File Toolbar: HKCU - No Name - {40C3CC16-7269-4B32-9531-17F2950FB06F} - No File Toolbar: HKCU - No Name - {474DCBF4-0DB1-4C6A-A014-1C2544E82698} - No File Toolbar: HKCU - No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - No File Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default FF user.js: detected! => C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\user.js FF NewTab: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=nt&installDate=29/07/2013 FF DefaultSearchEngine: awesomehp FF SelectedSearchEngine: Google FF Homepage: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=hp&installDate=29/07/2013 FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=158cb103-48cd-4021-ae57-91aa01fc1bb4&searchtype=ds&installDate=29/07/2013&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\searchplugins\SearchTheWeb.xml FF SearchPlugin: C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\searchplugins\Web Search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: MediaPlayerEnhance - C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\Extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com [2014-02-20] FF Extension: SecretSauce - C:\Users\Natrecia\AppData\Roaming\Mozilla\Firefox\Profiles\a3gj9yt9.default\Extensions\{345422e3-72fa-447a-9550-97803edfacf3}.xpi [2014-02-06] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2012-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2012-01-03] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-01-15] FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-01-03] FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-01-03] FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-01-03] FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com FF Extension: Iminent Minibar - C:\Program Files (x86)\Iminent\webbooster@iminent.com [2012-07-08] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390835865&from=ild&uid=ST9500325AS_5VEHQY8KXXXX5VEHQY8K Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (No Name) - C:\Users\Natrecia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo [2014-02-20] CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx [2012-07-02] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-04-25] CHR HKLM-x32\...\Chrome\Extension: [dhdepfaagokllfmhfbcfmocaeigmoebo] - C:\Users\Natrecia\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx [2012-06-15] CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - C:\Program Files (x86)\Iminent\Iminent.crx [2012-06-19] CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-04-25] CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-04-25] ==================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [202296 2011-04-24] (Kaspersky Lab ZAO) R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-02-06] (Just Develop It) R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) R2 PCSUService; C:\Program Files (x86)\PC Beschleunigen\PCSUService.exe [289544 2012-06-05] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [167936 2014-01-16] () R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R2 Update SecretSauce; C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe [111392 2014-02-21] () R2 Util SecretSauce; C:\Program Files (x86)\SecretSauce\bin\utilSecretSauce.exe [111392 2014-02-21] () S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R2 VOsrv; C:\Users\Natrecia\AppData\Roaming\VOPackage\VOsrv.exe [61456 2014-02-15] () ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2008-04-25] (ArcSoft, Inc.) R3 arcvad_ds2dhw; C:\Windows\System32\drivers\ArcVad.sys [27136 2008-10-28] (ArcSoft, Inc.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-29] (DT Soft Ltd) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [615728 2012-01-03] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab) R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-24 20:02 - 2014-02-24 20:03 - 00031132 _____ () C:\Users\Natrecia\Downloads\FRST.txt 2014-02-24 20:02 - 2014-02-24 20:02 - 00000000 ____D () C:\FRST 2014-02-24 20:01 - 2014-02-24 20:01 - 02156032 _____ (Farbar) C:\Users\Natrecia\Downloads\FRST64.exe 2014-02-24 08:18 - 2014-02-24 08:18 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-22 19:41 - 2014-02-22 19:41 - 25640672 _____ (Microsoft Corporation) C:\Users\Natrecia\Downloads\Windows-KB890830-x64-V5.9.exe 2014-02-22 19:40 - 2014-02-04 19:09 - 85946576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe 2014-02-22 19:39 - 2014-02-22 19:39 - 24793312 _____ (Microsoft Corporation) C:\Users\Natrecia\Downloads\Windows-KB890830-V5.9.exe 2014-02-22 19:30 - 2014-02-22 19:33 - 130658432 _____ () C:\Users\Natrecia\Downloads\avira_free_antivirus_de.exe 2014-02-22 19:15 - 2014-02-22 19:15 - 01069920 _____ (Solid State Networks) C:\Users\Natrecia\Downloads\install_reader11_de_ltr5x64d_awc_aih.exe 2014-02-22 19:13 - 2014-02-24 07:55 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Nico Mak Computing 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\ProgramData\Nico Mak Computing 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector 2014-02-22 19:13 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe 2014-02-22 19:12 - 2014-02-22 19:12 - 04892480 _____ (WinZip International LLC ) C:\Users\Natrecia\Downloads\wzmp_8.exe 2014-02-21 16:36 - 2014-02-21 16:36 - 00000000 ____D () C:\Program Files (x86)\SavingsBull 2014-02-20 18:17 - 2014-02-20 18:17 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup 2014-02-20 18:14 - 2014-02-20 18:17 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx 2014-02-20 18:14 - 2014-02-20 18:14 - 00825312 _____ (AnyProtect.com) C:\Users\Natrecia\AppData\Local\nsf3D2C.tmp 2014-02-20 17:57 - 2014-02-24 18:04 - 00001612 _____ () C:\Windows\Tasks\MediaPlayerEnhance-updater.job 2014-02-20 17:57 - 2014-02-20 17:57 - 00004642 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-updater 2014-02-20 17:56 - 2014-02-24 18:04 - 00003126 _____ () C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job 2014-02-20 17:56 - 2014-02-24 18:04 - 00002412 _____ () C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job 2014-02-20 17:56 - 2014-02-24 18:04 - 00001568 _____ () C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job 2014-02-20 17:56 - 2014-02-24 18:04 - 00001466 _____ () C:\Windows\Tasks\MediaPlayerEnhance-enabler.job 2014-02-20 17:56 - 2014-02-22 17:15 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup 2014-02-20 17:56 - 2014-02-20 17:57 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerEnhance 2014-02-20 17:56 - 2014-02-20 17:56 - 00004598 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-codedownloader 2014-02-20 17:56 - 2014-02-20 17:56 - 00004496 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-enabler 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\newplayer 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files\Conduit 2014-02-20 17:55 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files (x86)\NewPlayer 2014-02-20 17:55 - 2014-02-20 17:55 - 00000000 ____D () C:\Program Files\SavingsbullFilter 2014-02-20 17:54 - 2014-02-20 17:54 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\VOPackage 2014-02-20 17:54 - 2014-02-20 17:54 - 00000000 ____D () C:\Program Files\Level Quality Watcher 2014-02-20 17:53 - 2014-02-20 17:53 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\SearchProtect 2014-02-19 21:25 - 2014-02-24 07:49 - 00003388 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task 2014-02-18 10:29 - 2014-02-18 10:29 - 00003100 _____ () C:\Windows\System32\Tasks\{7050F2B7-7250-463B-96E1-D0AB5066BC4E} 2014-02-17 17:05 - 2014-02-17 17:05 - 00003100 _____ () C:\Windows\System32\Tasks\{F3F581E1-DD47-4454-9346-743BDDF07D2B} 2014-02-14 16:37 - 2014-02-14 16:38 - 00029184 ___SH () C:\Users\Natrecia\Downloads\Thumbs.db 2014-02-14 16:37 - 2014-02-14 16:38 - 00000000 ____D () C:\Program Files\GIMP 2 2014-02-14 15:11 - 2014-02-14 15:12 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{C9C5E76A-07F1-43E4-9770-B588C232BFAD} 2014-02-11 22:05 - 2014-02-11 22:05 - 00003100 _____ () C:\Windows\System32\Tasks\{1D9523DB-D667-46C6-8F22-844416FFAF8A} 2014-02-11 07:18 - 2014-02-11 07:18 - 00003100 _____ () C:\Windows\System32\Tasks\{9116965F-53DE-4CFB-B9E5-7D3534F56FCA} 2014-02-10 20:05 - 2014-02-10 20:05 - 00003100 _____ () C:\Windows\System32\Tasks\{424FB3E8-42F2-4F65-9B8C-D692CDB12034} 2014-02-10 18:36 - 2014-02-10 18:36 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{52671313-E187-4670-8E69-55FF70A6CBBA} 2014-02-09 21:50 - 2014-02-09 21:50 - 00003100 _____ () C:\Windows\System32\Tasks\{C6336889-C8FE-4715-9728-04E44B64EE47} 2014-02-09 08:04 - 2014-02-09 08:04 - 00003100 _____ () C:\Windows\System32\Tasks\{4EFC9F87-F4A0-4080-A959-5C670B7BB94C} 2014-02-07 22:24 - 2014-02-07 22:24 - 00003100 _____ () C:\Windows\System32\Tasks\{CB83E34B-16D4-4BB5-91AF-7CFC5606D206} 2014-02-07 14:41 - 2014-02-07 14:41 - 00003100 _____ () C:\Windows\System32\Tasks\{A0DCE932-23AC-4E02-B312-7863D48148D5} 2014-02-07 10:29 - 2014-02-07 10:29 - 00003100 _____ () C:\Windows\System32\Tasks\{25FF8DF9-AAD6-404F-B126-C1B7D7BFD680} 2014-02-06 09:11 - 2014-02-06 09:11 - 00003100 _____ () C:\Windows\System32\Tasks\{7E235A77-E945-4C58-B21E-922504AD8276} 2014-02-03 15:07 - 2014-02-03 15:07 - 00003100 _____ () C:\Windows\System32\Tasks\{0BA658D0-3A86-4204-A6F1-5EAFD4986DCE} 2014-02-01 20:34 - 2014-02-01 20:35 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{604B9203-96F0-41D3-AAA0-EE49E69C7F7F} 2014-02-01 14:23 - 2014-02-01 14:23 - 00003100 _____ () C:\Windows\System32\Tasks\{BFE3A743-2699-44FF-A881-90A710B9C3FF} 2014-02-01 09:09 - 2014-02-01 09:09 - 00003100 _____ () C:\Windows\System32\Tasks\{B1417CF8-290D-4CDB-BAF2-8E0DA50431A9} 2014-01-31 19:25 - 2014-01-31 19:25 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{F43461D7-984D-43F9-9897-0F9E2B365875} 2014-01-30 15:48 - 2014-01-30 15:48 - 00003100 _____ () C:\Windows\System32\Tasks\{C09B1478-103E-4EEF-A340-5D8EA4F6119A} 2014-01-30 14:24 - 2014-01-30 14:24 - 00003100 _____ () C:\Windows\System32\Tasks\{F890CC78-CD1C-4128-83DF-FB816B7CF05B} 2014-01-28 14:01 - 2014-01-28 14:01 - 00003100 _____ () C:\Windows\System32\Tasks\{0DF14938-EBF4-4068-B2CF-47793E6E8722} 2014-01-27 16:18 - 2014-01-27 16:19 - 00000000 ____D () C:\ProgramData\WPM 2014-01-27 16:18 - 2014-01-27 16:18 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Desk 365 2014-01-27 16:18 - 2014-01-27 16:18 - 00000000 ____D () C:\Program Files (x86)\Desk 365 2014-01-27 16:15 - 2014-02-10 21:48 - 00000000 ____D () C:\Program Files (x86)\SecretSauce 2014-01-27 16:13 - 2014-01-27 16:15 - 00000000 ____D () C:\Program Files (x86)\hdvidcodec.com 2014-01-27 16:12 - 2014-01-27 16:13 - 00531048 _____ () C:\Users\Natrecia\Downloads\HDvid-codec-FF.exe 2014-01-26 12:38 - 2014-01-26 12:38 - 00003100 _____ () C:\Windows\System32\Tasks\{B177AE58-A082-44F6-BA6D-CA53B9476018} 2014-01-26 11:23 - 2014-01-26 11:23 - 00003100 _____ () C:\Windows\System32\Tasks\{621E5B9E-EAC9-4D45-AC31-AA0304656648} ==================== One Month Modified Files and Folders ======= 2014-02-24 20:03 - 2014-02-24 20:02 - 00031132 _____ () C:\Users\Natrecia\Downloads\FRST.txt 2014-02-24 20:02 - 2014-02-24 20:02 - 00000000 ____D () C:\FRST 2014-02-24 20:02 - 2013-10-29 08:05 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-24 20:01 - 2014-02-24 20:01 - 02156032 _____ (Farbar) C:\Users\Natrecia\Downloads\FRST64.exe 2014-02-24 20:00 - 2012-07-21 10:53 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\BrowserCompanion 2014-02-24 19:51 - 2011-07-24 21:34 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{596286A1-1387-43C9-87E0-174FF32344C6} 2014-02-24 19:51 - 2011-07-24 20:24 - 01246366 _____ () C:\Windows\WindowsUpdate.log 2014-02-24 18:04 - 2014-02-20 17:57 - 00001612 _____ () C:\Windows\Tasks\MediaPlayerEnhance-updater.job 2014-02-24 18:04 - 2014-02-20 17:56 - 00003126 _____ () C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job 2014-02-24 18:04 - 2014-02-20 17:56 - 00002412 _____ () C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job 2014-02-24 18:04 - 2014-02-20 17:56 - 00001568 _____ () C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job 2014-02-24 18:04 - 2014-02-20 17:56 - 00001466 _____ () C:\Windows\Tasks\MediaPlayerEnhance-enabler.job 2014-02-24 08:18 - 2014-02-24 08:18 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-24 08:18 - 2013-10-29 08:05 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-24 08:14 - 2011-11-21 15:00 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Skype 2014-02-24 07:59 - 2013-07-29 12:23 - 00000000 ____D () C:\Program Files (x86)\PC Beschleunigen 2014-02-24 07:58 - 2013-11-12 13:15 - 00304702 _____ () C:\Windows\IE11_main.log 2014-02-24 07:57 - 2013-07-30 06:41 - 00557595 _____ () C:\Windows\IE10_main.log 2014-02-24 07:56 - 2009-07-14 05:45 - 00020992 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-24 07:56 - 2009-07-14 05:45 - 00020992 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-24 07:55 - 2014-02-22 19:13 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup 2014-02-24 07:50 - 2012-01-03 20:31 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-24 07:49 - 2014-02-19 21:25 - 00003388 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task 2014-02-24 07:49 - 2011-07-24 20:38 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-24 07:48 - 2012-02-04 16:07 - 00052202 _____ () C:\Windows\setupact.log 2014-02-24 07:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-22 19:41 - 2014-02-22 19:41 - 25640672 _____ (Microsoft Corporation) C:\Users\Natrecia\Downloads\Windows-KB890830-x64-V5.9.exe 2014-02-22 19:39 - 2014-02-22 19:39 - 24793312 _____ (Microsoft Corporation) C:\Users\Natrecia\Downloads\Windows-KB890830-V5.9.exe 2014-02-22 19:33 - 2014-02-22 19:30 - 130658432 _____ () C:\Users\Natrecia\Downloads\avira_free_antivirus_de.exe 2014-02-22 19:20 - 2012-03-21 13:56 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\Adobe 2014-02-22 19:20 - 2011-07-24 20:59 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-22 19:19 - 2011-07-24 20:59 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-22 19:15 - 2014-02-22 19:15 - 01069920 _____ (Solid State Networks) C:\Users\Natrecia\Downloads\install_reader11_de_ltr5x64d_awc_aih.exe 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Nico Mak Computing 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\ProgramData\Nico Mak Computing 2014-02-22 19:13 - 2014-02-22 19:13 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector 2014-02-22 19:13 - 2011-07-24 22:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-22 19:12 - 2014-02-22 19:12 - 04892480 _____ (WinZip International LLC ) C:\Users\Natrecia\Downloads\wzmp_8.exe 2014-02-22 17:15 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup 2014-02-21 16:36 - 2014-02-21 16:36 - 00000000 ____D () C:\Program Files (x86)\SavingsBull 2014-02-21 09:21 - 2013-10-29 08:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-21 09:21 - 2013-10-29 08:05 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-21 09:21 - 2012-01-03 21:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-20 18:17 - 2014-02-20 18:17 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup 2014-02-20 18:17 - 2014-02-20 18:14 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx 2014-02-20 18:14 - 2014-02-20 18:14 - 00825312 _____ (AnyProtect.com) C:\Users\Natrecia\AppData\Local\nsf3D2C.tmp 2014-02-20 17:57 - 2014-02-20 17:57 - 00004642 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-updater 2014-02-20 17:57 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerEnhance 2014-02-20 17:56 - 2014-02-20 17:56 - 00004598 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-codedownloader 2014-02-20 17:56 - 2014-02-20 17:56 - 00004496 _____ () C:\Windows\System32\Tasks\MediaPlayerEnhance-enabler 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\newplayer 2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files\Conduit 2014-02-20 17:56 - 2014-02-20 17:55 - 00000000 ____D () C:\Program Files (x86)\NewPlayer 2014-02-20 17:56 - 2012-07-21 10:58 - 00000000 _____ () C:\END 2014-02-20 17:56 - 2011-07-24 21:28 - 00000000 ___RD () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-20 17:55 - 2014-02-20 17:55 - 00000000 ____D () C:\Program Files\SavingsbullFilter 2014-02-20 17:55 - 2012-01-15 18:29 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\Conduit 2014-02-20 17:55 - 2012-01-15 18:29 - 00000000 ____D () C:\Program Files (x86)\Conduit 2014-02-20 17:54 - 2014-02-20 17:54 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\VOPackage 2014-02-20 17:54 - 2014-02-20 17:54 - 00000000 ____D () C:\Program Files\Level Quality Watcher 2014-02-20 17:53 - 2014-02-20 17:53 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\SearchProtect 2014-02-20 08:32 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-18 10:29 - 2014-02-18 10:29 - 00003100 _____ () C:\Windows\System32\Tasks\{7050F2B7-7250-463B-96E1-D0AB5066BC4E} 2014-02-18 10:29 - 2011-07-24 21:16 - 00000000 ____D () C:\ProgramData\Skype 2014-02-17 17:14 - 2013-10-26 09:17 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 17:05 - 2014-02-17 17:05 - 00003100 _____ () C:\Windows\System32\Tasks\{F3F581E1-DD47-4454-9346-743BDDF07D2B} 2014-02-16 11:34 - 2013-07-29 12:23 - 00000366 _____ () C:\Windows\Tasks\PC SpeedUp Service Deactivator.job 2014-02-15 08:38 - 2012-10-23 12:37 - 00000000 ____D () C:\Users\Natrecia\Desktop\Pics ♥ 2014-02-14 16:38 - 2014-02-14 16:37 - 00029184 ___SH () C:\Users\Natrecia\Downloads\Thumbs.db 2014-02-14 16:38 - 2014-02-14 16:37 - 00000000 ____D () C:\Program Files\GIMP 2 2014-02-14 15:12 - 2014-02-14 15:11 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{C9C5E76A-07F1-43E4-9770-B588C232BFAD} 2014-02-14 10:21 - 2011-08-28 10:21 - 00131844 _____ () C:\test.xml 2014-02-13 22:08 - 2011-07-24 21:19 - 05696778 _____ () C:\Windows\system32\perfh007.dat 2014-02-13 22:08 - 2011-07-24 21:19 - 01749114 _____ () C:\Windows\system32\perfc007.dat 2014-02-13 22:08 - 2009-07-14 06:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-11 22:05 - 2014-02-11 22:05 - 00003100 _____ () C:\Windows\System32\Tasks\{1D9523DB-D667-46C6-8F22-844416FFAF8A} 2014-02-11 07:18 - 2014-02-11 07:18 - 00003100 _____ () C:\Windows\System32\Tasks\{9116965F-53DE-4CFB-B9E5-7D3534F56FCA} 2014-02-10 21:48 - 2014-01-27 16:15 - 00000000 ____D () C:\Program Files (x86)\SecretSauce 2014-02-10 20:05 - 2014-02-10 20:05 - 00003100 _____ () C:\Windows\System32\Tasks\{424FB3E8-42F2-4F65-9B8C-D692CDB12034} 2014-02-10 18:36 - 2014-02-10 18:36 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{52671313-E187-4670-8E69-55FF70A6CBBA} 2014-02-09 21:50 - 2014-02-09 21:50 - 00003100 _____ () C:\Windows\System32\Tasks\{C6336889-C8FE-4715-9728-04E44B64EE47} 2014-02-09 13:27 - 2012-02-04 15:48 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\CrashDumps 2014-02-09 08:04 - 2014-02-09 08:04 - 00003100 _____ () C:\Windows\System32\Tasks\{4EFC9F87-F4A0-4080-A959-5C670B7BB94C} 2014-02-07 22:24 - 2014-02-07 22:24 - 00003100 _____ () C:\Windows\System32\Tasks\{CB83E34B-16D4-4BB5-91AF-7CFC5606D206} 2014-02-07 14:41 - 2014-02-07 14:41 - 00003100 _____ () C:\Windows\System32\Tasks\{A0DCE932-23AC-4E02-B312-7863D48148D5} 2014-02-07 10:29 - 2014-02-07 10:29 - 00003100 _____ () C:\Windows\System32\Tasks\{25FF8DF9-AAD6-404F-B126-C1B7D7BFD680} 2014-02-06 09:11 - 2014-02-06 09:11 - 00003100 _____ () C:\Windows\System32\Tasks\{7E235A77-E945-4C58-B21E-922504AD8276} 2014-02-04 19:09 - 2014-02-22 19:40 - 85946576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe 2014-02-04 19:09 - 2012-02-04 16:25 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-03 15:07 - 2014-02-03 15:07 - 00003100 _____ () C:\Windows\System32\Tasks\{0BA658D0-3A86-4204-A6F1-5EAFD4986DCE} 2014-02-01 20:35 - 2014-02-01 20:34 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{604B9203-96F0-41D3-AAA0-EE49E69C7F7F} 2014-02-01 14:23 - 2014-02-01 14:23 - 00003100 _____ () C:\Windows\System32\Tasks\{BFE3A743-2699-44FF-A881-90A710B9C3FF} 2014-02-01 09:09 - 2014-02-01 09:09 - 00003100 _____ () C:\Windows\System32\Tasks\{B1417CF8-290D-4CDB-BAF2-8E0DA50431A9} 2014-01-31 19:25 - 2014-01-31 19:25 - 00000000 ____D () C:\Users\Natrecia\AppData\Local\{F43461D7-984D-43F9-9897-0F9E2B365875} 2014-01-30 15:48 - 2014-01-30 15:48 - 00003100 _____ () C:\Windows\System32\Tasks\{C09B1478-103E-4EEF-A340-5D8EA4F6119A} 2014-01-30 14:24 - 2014-01-30 14:24 - 00003100 _____ () C:\Windows\System32\Tasks\{F890CC78-CD1C-4128-83DF-FB816B7CF05B} 2014-01-28 14:01 - 2014-01-28 14:01 - 00003100 _____ () C:\Windows\System32\Tasks\{0DF14938-EBF4-4068-B2CF-47793E6E8722} 2014-01-27 16:19 - 2014-01-27 16:18 - 00000000 ____D () C:\ProgramData\WPM 2014-01-27 16:18 - 2014-01-27 16:18 - 00000000 ____D () C:\Users\Natrecia\AppData\Roaming\Desk 365 2014-01-27 16:18 - 2014-01-27 16:18 - 00000000 ____D () C:\Program Files (x86)\Desk 365 2014-01-27 16:17 - 2013-11-04 16:58 - 00002296 _____ () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-01-27 16:17 - 2013-11-04 16:58 - 00002234 _____ () C:\Users\Natrecia\Desktop\Search.lnk 2014-01-27 16:17 - 2011-11-20 18:43 - 00001330 _____ () C:\Users\Natrecia\Desktop\Internet.lnk 2014-01-27 16:17 - 2011-07-24 21:28 - 00001631 _____ () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-27 16:17 - 2011-07-24 21:28 - 00001609 _____ () C:\Users\Natrecia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-27 16:15 - 2014-01-27 16:13 - 00000000 ____D () C:\Program Files (x86)\hdvidcodec.com 2014-01-27 16:13 - 2014-01-27 16:12 - 00531048 _____ () C:\Users\Natrecia\Downloads\HDvid-codec-FF.exe 2014-01-26 12:38 - 2014-01-26 12:38 - 00003100 _____ () C:\Windows\System32\Tasks\{B177AE58-A082-44F6-BA6D-CA53B9476018} 2014-01-26 11:23 - 2014-01-26 11:23 - 00003100 _____ () C:\Windows\System32\Tasks\{621E5B9E-EAC9-4D45-AC31-AA0304656648} Some content of TEMP: ==================== C:\Users\Natrecia\AppData\Local\Temp\AutoRun.exe C:\Users\Natrecia\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Natrecia\AppData\Local\Temp\BackupSetup.exe C:\Users\Natrecia\AppData\Local\Temp\Browser_Helper_Companion_DE.exe C:\Users\Natrecia\AppData\Local\Temp\Browser_Helper_Companion_DE[1].exe C:\Users\Natrecia\AppData\Local\Temp\comver.dll C:\Users\Natrecia\AppData\Local\Temp\conduitinstaller.exe C:\Users\Natrecia\AppData\Local\Temp\contentDATs.exe C:\Users\Natrecia\AppData\Local\Temp\dlLogic.exe C:\Users\Natrecia\AppData\Local\Temp\drm_dyndata_7400006.dll C:\Users\Natrecia\AppData\Local\Temp\eauninstall.exe C:\Users\Natrecia\AppData\Local\Temp\EnableExtDll.dll C:\Users\Natrecia\AppData\Local\Temp\GLF108D.tmp.ConduitEngineSetup.exe C:\Users\Natrecia\AppData\Local\Temp\Myashampoo.exe C:\Users\Natrecia\AppData\Local\Temp\SecurityScan_Release.exe C:\Users\Natrecia\AppData\Local\Temp\SkypeSetup.exe C:\Users\Natrecia\AppData\Local\Temp\softonic_ssk_conduit.exe C:\Users\Natrecia\AppData\Local\Temp\sqlite3.dll C:\Users\Natrecia\AppData\Local\Temp\tfktmsnx.dll C:\Users\Natrecia\AppData\Local\Temp\The Sims 2 Seasons_uninst.exe C:\Users\Natrecia\AppData\Local\Temp\vcredist_x64.exe C:\Users\Natrecia\AppData\Local\Temp\VP6Install.exe C:\Users\Natrecia\AppData\Local\Temp\VP6VFW.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-27 18:57 ==================== End Of Log ============================ --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-02-2014 Ran by Natrecia at 2014-02-24 20:04:05 Running from C:\Users\Natrecia\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Out of date) {2EAA32A5-1EE1-1B22-95DA-337730C6E984} AS: Kaspersky Internet Security (Enabled - Up to date) {95CBD341-38DB-14AC-AF6A-08054B41A339} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {1691B380-548E-1A7A-BE85-9A42CE15AEFF} ==================== Installed Programs ====================== ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated) Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.) AnyProtect (HKLM-x32\...\AnyProtect) (Version: 1.0.0.0 - CMI Limited) appbario6 Toolbar (HKLM-x32\...\appbario6 Toolbar) (Version: 6.8.10.0 - appbario6) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{8866BCB3-3818-4C66-83BC-92006B5EFE50}) (Version: 2.0.1.142 - ArcSoft) ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.392 - ArcSoft) Ashampoo Slideshow Studio Elements 2.0.1 (HKLM-x32\...\Ashampoo Slideshow Studio Elements_is1) (Version: 2.0.1 - ashampoo GmbH & Co. KG) Bing Bar (HKLM-x32\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.95 - Atheros Communications) BrowserCompanion (HKLM-x32\...\BrowserCompanion) (Version: - ) <==== ATTENTION CCleaner (HKLM\...\CCleaner) (Version: 3.10 - Piriform) Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Complemento Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Conduit Engine (HKLM-x32\...\conduitEngine) (Version: - Conduit Ltd.) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant) Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Die Sims 2: Family Fun - Accessoires (HKLM-x32\...\{6BDD9CE6-D0A6-478A-BAD3-BA6945E89EB0}) (Version: - ) Die Sims 2: Nightlife (HKLM-x32\...\{F7529650-B9DB-481B-0089-A2AC3C2821C1}) (Version: - ) Die Sims 2: Open For Business (HKLM-x32\...\{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}) (Version: - ) Die Sims 2: Wilde Campus-Jahre (HKLM-x32\...\{01521746-02A6-4A72-00BD-A285DF6B80C6}) (Version: - ) Die Sims™ 2 (HKLM-x32\...\{2C82E097-694E-44ea-A947-2750679469CF}) (Version: - Electronic Arts) Die Sims™ 2 H&M®-Fashion-Accessoires (HKLM-x32\...\{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75}) (Version: - ) Die Sims™ 2 Haustiere (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version: - ) Die Sims™ 2 Party-Accessoires (HKLM-x32\...\{EAA38532-7AD0-4f78-918A-4F4F02096ECE}) (Version: - ) Die Sims™ 2 Vier Jahreszeiten (HKLM-x32\...\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}) (Version: - ) Die Sims™ 2: Glamour-Accessoires (HKLM-x32\...\{9CDBC303-3EED-40b0-8E41-A7C65AA96C26}) (Version: - ) Doplnok programu Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden DVDVideoSoftTB Toolbar (HKLM-x32\...\DVDVideoSoftTB Toolbar) (Version: 6.8.5.1 - DVDVideoSoftTB) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Free YouTube to MP3 Converter version 3.10.15.1228 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Ltd.) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - ) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION Hugo Retro Mania (HKLM-x32\...\{31902FF5-6B59-4768-BB7A-7F38B149A04F}) (Version: 1.0.0 - Krea Medie) ICQ7.7 (HKLM-x32\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ) Iminent (HKLM-x32\...\IMBoosterARP) (Version: 5.26.21.0 - Iminent) <==== ATTENTION Iminent (x32 Version: 5.26.21.0 - Iminent) Hidden <==== ATTENTION IMinent Toolbar (HKLM-x32\...\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}) (Version: 3.26.0 - IMinent) <==== ATTENTION Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation) Java Auto Updater (x32 Version: 2.0.2.4 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 22 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416022FF}) (Version: 6.0.220 - Oracle) Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kaspersky Internet Security 2012 (HKLM-x32\...\InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}) (Version: 12.0.0.374 - Kaspersky Lab) Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Hidden MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_MSI_FotoDesigner7_silver) (Version: 7.0.1.1 - MAGIX AG) MAGIX Foto Designer 7 (x32 Version: 7.0.1.1 - MAGIX AG) Hidden McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Media Gallery (Version: 1.5.0.16020 - Your Company Name) Hidden MediaPlayerEnhance (HKLM-x32\...\MediaPlayerEnhance) (Version: 1.34.2.13 - Feven) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Assistent (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger kísérő (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger-kumppani (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MotoGP URT 3 (HKLM-x32\...\MotoGP URT 3_is1) (Version: - THQ) Mozilla Firefox 12.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 12.0 (x86 de)) (Version: 12.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 12.0 - Mozilla) Mozilla Thunderbird (5.0) (HKLM-x32\...\Mozilla Thunderbird (5.0)) (Version: 5.0 (de) - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) MyAshampoo Toolbar (HKLM-x32\...\MyAshampoo Toolbar) (Version: 6.2.7.3 - MyAshampoo) <==== ATTENTION MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION NewPlayer (HKLM-x32\...\NewPlayer) (Version: v2.1.1.0 - TUGUU SL) <==== ATTENTION NVIDIA 3D Vision Treiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 267.21 - NVIDIA Corporation) NVIDIA Grafiktreiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.21 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.2.19.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.19.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6721 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 267.21 (Version: 267.21 - NVIDIA Corporation) Hidden OLYMPUS CAMEDIA Master 4.2 (HKLM-x32\...\{30BB4D60-81DB-11D5-BB77-00400536ABAC}) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.) Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation) Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC) PC Beschleunigen - Vollständige Deinstallation (HKLM\...\PCSU-SL_is1) (Version: 3.1.2 - Speedchecker Limited) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (Version: 1.5.00.04010 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.5.00.04060 - Sony Corporation) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pomocnik Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QuickTime (HKLM-x32\...\QuickTime) (Version: - ) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.) Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden Savings Sidekick (HKLM-x32\...\Savings Sidekick) (Version: 1.18.149.149 - 215 Apps) SavingsBull (x32 Version: 1.0.0.0 - SavingsBull) Hidden SavingsbullFilter (HKLM\...\{813BA625-B0FA-48D8-9B75-59759C88C219}) (Version: 1.0.0.0 - SavingsBull Filter) <==== ATTENTION SecretSauce (HKLM\...\SecretSauce) (Version: 2014.01.25.032321 - SecretSauce) <==== ATTENTION Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 5.10 (HKLM-x32\...\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}) (Version: 5.10.115 - Skype Technologies S.A.) Snap.Do (HKLM-x32\...\{084B3661-F647-4E44-9018-D7DCDF538057}) (Version: 11.7.1.13233 - ReSoft Ltd.) Snap.Do Engine (HKCU\...\{6b43f149-73e7-444f-a8c7-12d6db160582}) (Version: 11.7.1.13233 - ReSoft Ltd.) Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden SpongeBob Schwammkopf - Schlacht um Bikini Bottom (HKLM-x32\...\{E95FEA31-034D-42D0-8ED6-44D7F838BA6E}) (Version: 1.00.000 - ) SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden Sven Bømwøllen (HKLM-x32\...\{E24AECDA-101F-11D6-986D-00500443CF9F}) (Version: - ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation) VAIO - Media Gallery (HKLM-x32\...\{FA870BF1-44A1-4B7D-93E1-C101369AF0C1}) (Version: 1.5.0.16020 - Sony Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.02250 - Sony Corporation) VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.5.00.04060 - Sony Corporation) VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation) VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation) VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.0.15030 - Sony Corporation) VAIO Care (x32 Version: 6.4.0.15030 - Sony Corporation) Hidden VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden VAIO Easy Connect (HKLM-x32\...\{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.0.0.03050 - Sony Corporation) VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.3.0.11090 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation) VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation) VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.3 - Sony Corporation) VAIO Quick Web Access (x32 Version: 1.4.5.3 - Sony Corporation) Hidden VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.5.0.02280 - Sony Corporation) VAIO Update (HKLM-x32\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.5.3.10280 - Sony Corporation) VAIO Update Merge Module x64 (Version: 5.6.10270 - Sony Corporation) Hidden VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation) ValueApps (HKCU\...\ValueApps) (Version: 1.4.0.3 - Conduit) VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VESx64 (Version: 1.0.0 - Sony Corporation) Hidden VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VIx64 (Version: 1.0.0 - Sony Corporation) Hidden VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорація Майкрософт) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Winload Toolbar (HKLM-x32\...\Winload Toolbar) (Version: 6.8.9.0 - Winload) WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10798 - WinZip International LLC) WPM17.8.0.3325 (HKLM-x32\...\WPM) (Version: 17.8.0.3325 - Cherished Technololgy LIMITED) <==== ATTENTION Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Елемент керування Windows Live Mesh ActiveX для віддалених підключень (HKLM-x32\...\{6756D5CA-3E31-4308-9BF0-79DFD1AF196E}) (Version: 15.4.5722.2 - Microsoft Corporation) Компаньон Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Помощник на Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Рупор Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Restore Points ========================= 13-02-2014 22:20:18 Windows Update 14-02-2014 20:23:19 Windows Update 16-02-2014 10:08:39 Windows Update 17-02-2014 16:03:34 Windows Update 18-02-2014 09:27:46 Windows Update 20-02-2014 07:36:47 Windows Update 20-02-2014 16:54:13 Uniblue SpeedUpMyPC installation 21-02-2014 07:08:51 Windows Update 21-02-2014 21:37:28 Windows Update 22-02-2014 09:17:28 Windows Update 23-02-2014 15:59:58 Windows Update 24-02-2014 06:53:24 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {03B51A00-3E38-421B-8AE6-39E7D5448DD2} - System32\Tasks\{932AD4D3-EF61-4751-B498-0E5238828F80} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {09663CE1-6FD8-4F49-9387-CC65EED6C343} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {0AAB56BA-98BA-4FBA-A497-9B0DD8493452} - System32\Tasks\{49E13964-6366-4FA8-B37C-1B8DBA23A943} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {0E57FBD0-5663-4A35-AF7C-33C628376077} - System32\Tasks\MediaPlayerEnhance-firefoxinstaller => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-firefoxinstaller.exe [2014-02-20] (Feven) Task: {0F508F49-A694-48F6-A1BA-8EB19015D86D} - System32\Tasks\{7E235A77-E945-4C58-B21E-922504AD8276} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {13C989B8-5AE8-45B2-BAA4-C30E712058C0} - System32\Tasks\MediaPlayerEnhance-updater => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-updater.exe [2014-02-20] (Feven) Task: {16EF6CB4-CF28-4265-92B4-5967E289889A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {175DFF26-C1B3-41F7-B15D-395CC9234AB1} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-07-15] (Nico Mak Computing) Task: {1B676F4C-36F7-4A26-B061-CD8ED732BA01} - System32\Tasks\{424FB3E8-42F2-4F65-9B8C-D692CDB12034} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1CCADD2D-7398-4FA7-9A05-AA35DC0C62F4} - System32\Tasks\{175649B2-D2AE-45AF-A7EB-F0E95EA935EF} => Firefox.exe hxxp://ui.skype.com/ui/0/5.6.0.110/de/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {1EF6CE70-7CEA-4C6E-9EEE-2742F6C25689} - System32\Tasks\{F544E29C-FA22-4E21-B707-2CDFB3C74A0C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1F218A76-E4D0-4DA5-9502-112A6ED92C55} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Natrecia\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION Task: {1F22E8C5-FA32-4039-9F41-1B01E3B463FA} - System32\Tasks\{CB83E34B-16D4-4BB5-91AF-7CFC5606D206} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {1F63C6B6-DE22-477B-9DCB-507122537476} - System32\Tasks\{C0321F20-05A8-4205-9788-C26889B4B279} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {30EF5908-2221-4E83-8F6C-05171BDF972F} - System32\Tasks\{03098F4B-74E3-47BA-B0DF-6EE07C144A82} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {316DAAF2-E8A0-40C7-A333-AD5EB402F1B3} - System32\Tasks\{F3F581E1-DD47-4454-9346-743BDDF07D2B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {32D33DC8-8B45-42B6-942D-0BE4DE48B5DE} - System32\Tasks\{7050F2B7-7250-463B-96E1-D0AB5066BC4E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {365ADD84-CEE4-47EC-8712-0A2ADCAE2287} - System32\Tasks\{E23556D4-8F5C-4D2D-9AE2-6FA97939E9C4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3BEA3206-BDFA-4AE4-B1C7-E2613DA3CB59} - System32\Tasks\{B0AE2A0D-BB7D-4DD2-B4C2-619E0498F811} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3CB0C417-D15B-4DE1-AE9F-DA813AF06E82} - System32\Tasks\{0BA658D0-3A86-4204-A6F1-5EAFD4986DCE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {3E42D20B-82F6-48C8-95E6-95A4EE53D2C1} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-11-16] (Sony Corporation) Task: {3FBC6481-ABBA-40D5-9801-E39704045674} - System32\Tasks\{1D9523DB-D667-46C6-8F22-844416FFAF8A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {41C35B1F-426C-422C-982C-0057F8358112} - System32\Tasks\{B50C4377-C657-482C-8F4E-4EE95796EC40} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {45F4C881-191F-4F91-9DB5-2CFEA5087887} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-11-16] (Sony Corporation) Task: {49FE66D6-53D6-4951-A627-8B4C9ECA37CE} - System32\Tasks\{E18A82D0-2C43-4EA1-9432-9C1D5DB2C618} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4A175E43-3D3A-478F-9B81-6962A61EAF6B} - System32\Tasks\{40D66AC8-1CC8-46C5-B60C-98C4A7FE5221} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4EC5513A-906F-46E3-84A1-7ED69C1DD036} - System32\Tasks\{B891267E-E2BF-47D1-9C88-520555BA4238} => Firefox.exe hxxp://ui.skype.com/ui/0/5.6.0.110/fi/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {56012E69-5FA2-4548-AD9D-415B1627BC47} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation) Task: {5CA4999F-37C6-4CFD-8693-DEE0F3EB4F93} - System32\Tasks\{BFE3A743-2699-44FF-A881-90A710B9C3FF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5F3B4C1D-9C95-4751-8E96-0AA05C7ECE1E} - System32\Tasks\{9116965F-53DE-4CFB-B9E5-7D3534F56FCA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {651F9E1C-36FE-43F4-872E-DACAC81CE2AC} - System32\Tasks\{468FC750-2791-4B73-B80E-334DA18C1BB2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {73265EA4-5648-4340-B831-294096C3F9D0} - System32\Tasks\MediaPlayerEnhance-codedownloader => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-codedownloader.exe [2014-02-20] (Feven) Task: {7BFB1421-85EB-46A5-808C-DDB0EFE5C501} - System32\Tasks\{62F9A6B6-2A70-443E-9611-0D17ABCA4E3E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {817CBB6D-A310-4612-BADF-54B97DFB2F15} - System32\Tasks\{4BD325F4-FD70-46B8-B8B1-CFABC22C45E8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {81AF5D57-AF1D-4CEE-9165-A1E72A6EA34B} - System32\Tasks\{2BF9B0DA-4216-4C42-A75D-A8FE336DFB0C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {83A1DE10-8924-45B5-B322-36CABBE9793F} - System32\Tasks\{085CCB4D-05B9-418B-831A-F49888EA1577} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8633CFF2-A2F9-4BA4-9E54-84A4A8AA7BED} - System32\Tasks\{7093ADF9-5AD3-4979-A1A8-BAF0F560EFF0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {87EECBDD-9D81-4803-B624-00C54DB9C3F2} - System32\Tasks\{89420713-9A4F-4A85-9C29-D856BF3D2693} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8918310A-DB1C-4CEF-8CEC-7BBA0218EAAC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated) Task: {8B316D4F-F0B6-4B92-9DD1-355CC62BB95F} - System32\Tasks\{B0D48DA9-CAF9-4DA6-8B5D-E1E53B0FDFB2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8B54B622-809B-4241-AE38-14792B170674} - System32\Tasks\PC SpeedUp Service Deactivator => C:\Program Files (x86)\PC Beschleunigen\PCSUSD.exe [2012-06-05] () <==== ATTENTION Task: {8CC8B149-BE5F-4712-9E6A-7E2628490235} - System32\Tasks\{25FF8DF9-AAD6-404F-B126-C1B7D7BFD680} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {8E5ABA77-5547-4ED3-9E80-9611615F28A6} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient Task: {8EA32FDD-9A8E-4DFB-8376-F595BC9E7CD4} - System32\Tasks\{CCFF821B-4293-4C66-BE77-FBBEA273EC4B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {94D9FADD-E725-41CA-9736-BA6D66E8AF40} - System32\Tasks\{5C88E686-BA08-45BC-8871-613564228408} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9863DD0C-C555-48C9-9992-9F4EB9EBE83A} - System32\Tasks\{0102C0A3-BE2C-4288-9024-D96B4D210A68} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {9A79CE89-7E51-4F66-8BD9-7845157F7D8D} - System32\Tasks\{056B0D4D-91F5-44B8-A3C2-B0440BE33192} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A1DF41E3-1DB8-4203-9C0D-EF832D90FE05} - System32\Tasks\{5941F2BB-7ECC-4323-8013-1F335BCB2CAA} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A7967530-2D9F-4C61-959E-B5B4AA4B6EAB} - System32\Tasks\MediaPlayerEnhance-chromeinstaller => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-chromeinstaller.exe [2014-02-20] (Feven) Task: {A9D7E493-1D31-4A5D-9785-E72EE89737B2} - System32\Tasks\{8187239C-553B-4C2B-A1F2-9E5C6DE47592} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {A9F76C4D-6F00-4486-B86F-84DD85775E29} - System32\Tasks\{3EC45A08-DF7B-43B9-93F6-C824B093C0FF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AB066DAD-5AD3-4596-8DDB-738C315435C7} - System32\Tasks\{0DF14938-EBF4-4068-B2CF-47793E6E8722} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AE10829C-1F65-4AAA-B779-8CCE872794FD} - System32\Tasks\{9CDD342C-ED50-4A1C-B1AE-0FF4619F86BC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AEE9E4F4-184C-47F8-9D22-33C983069605} - System32\Tasks\{D6A0B4EE-DF88-4E53-803C-825F9209F0EB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {AFC335B6-E208-4A34-841A-13DBDD96EBC1} - System32\Tasks\{D439E2E2-FDF8-43D9-B747-C929C0DF3D60} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B0F43CC7-C2AA-489C-B299-FD53B3644C73} - System32\Tasks\{FFD81145-8DC5-49BC-81F0-00A148CCE2C0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B59103DF-C766-4431-97BC-A8AD0E786E87} - System32\Tasks\{A0DCE932-23AC-4E02-B312-7863D48148D5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B5FDF78A-24E8-4D88-9EC7-D94BACA63B5F} - System32\Tasks\{6D317076-C2FF-40EF-A6E0-BC19E81C3EA0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B6AB18F5-C54F-4629-B4DB-CA3436AB4250} - System32\Tasks\{4EFC9F87-F4A0-4080-A959-5C670B7BB94C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {B7900D11-5F86-40E2-B556-1CD9EA525F15} - System32\Tasks\{6F360D3C-E3D9-4ACC-9B46-C758686C0BC9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {BB93DAB8-A32D-4A49-83A8-90AA5D2CF08C} - System32\Tasks\{5DACB3FF-87CA-432F-A71A-332BBD0FB2C9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {BC11259A-22A3-4FC1-BC8A-F673326A083D} - System32\Tasks\{C09B1478-103E-4EEF-A340-5D8EA4F6119A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {BF6B9B57-9621-4707-988B-6C1FB12E7194} - System32\Tasks\{CEE1E570-3ABF-41DF-BD40-0B21A7F05681} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C30C8B06-F5E4-4200-81BD-9B4645B963A4} - System32\Tasks\{B15A1351-99AA-4207-9BAC-BA7948E4E462} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C391F422-3D12-4A4C-9E19-926640CDD682} - System32\Tasks\{F890CC78-CD1C-4128-83DF-FB816B7CF05B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C7726582-DE74-4602-9207-81F2769BB08F} - System32\Tasks\{B1417CF8-290D-4CDB-BAF2-8E0DA50431A9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {C93145BA-49E7-4D8E-84D6-3864A9D78A66} - System32\Tasks\MediaPlayerEnhance-enabler => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-enabler.exe [2014-02-20] (Feven) <==== ATTENTION Task: {CABAF54D-A22B-4073-8FD5-3B0B0983CAAF} - System32\Tasks\{12680DE4-643B-41B7-AFFA-06187F3775A9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CB6D4D46-715B-4A00-B550-C4A4D17FA49B} - System32\Tasks\{38B767E7-BD2D-41D3-B210-E26329C3E8DD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {CEF7F6C8-47CC-42BD-AA20-3AD99A0B6A83} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {D3AF0FFF-F4E4-4629-9665-09FCBEB5E287} - System32\Tasks\{16BFA50C-2951-4FC9-B2A1-032A449C1D9C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {D8598E3C-79EF-4F03-88D7-2ED501DE7CA0} - System32\Tasks\{C6336889-C8FE-4715-9728-04E44B64EE47} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E0DC7B32-D465-401C-93E6-E6A47B98CDFA} - System32\Tasks\{B177AE58-A082-44F6-BA6D-CA53B9476018} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E3BC1A4A-C7B7-4EE3-BD91-E9128F8AFAFD} - System32\Tasks\{EDB2CCFD-9797-4BC4-9D48-36DABD8D20BD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E6FF2A21-95C2-4409-A586-1562223AAAFC} - System32\Tasks\{124AA307-C25E-4384-AAEA-FBE11C800630} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {E80BE389-F611-42E6-ABC1-0E8367A6BA2E} - System32\Tasks\{354225EB-5642-4322-986E-6F035CC991F8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {EA259A37-186B-4311-BF65-AC081FFA061D} - System32\Tasks\{E3AC501D-AE75-4D6D-935C-1DE34015E993} => Firefox.exe hxxp://ui.skype.com/ui/0/5.6.0.110/de/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {EA4395B1-B26A-44BD-8E53-7DC566EE28BC} - System32\Tasks\{803E6357-43D4-496C-B469-F0059B6C85D9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F11121DD-E443-40A1-A1F5-F3BD18789B4E} - System32\Tasks\{621E5B9E-EAC9-4D45-AC31-AA0304656648} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F77F659B-2E85-4C03-BFD8-88BB5FF3FC0E} - System32\Tasks\{654A9E82-527C-4064-B7C9-7026FC10B0D9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {F949CF72-B756-4B44-9183-E18C1B133BCF} - System32\Tasks\{CA6DC3F8-5D94-46FC-A513-F8B6FAEC61EE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {FEB81337-D828-4CA3-B6CC-F67D1ED1875F} - System32\Tasks\{B6A050D8-4C5C-45AD-9891-B99FF545C2AC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.6.0.110/de/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-chromeinstaller.exe Task: C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-codedownloader.exe Task: C:\Windows\Tasks\MediaPlayerEnhance-enabler.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-enabler.exe <==== ATTENTION Task: C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-firefoxinstaller.exe Task: C:\Windows\Tasks\MediaPlayerEnhance-updater.job => C:\Program Files (x86)\MediaPlayerEnhance\MediaPlayerEnhance-updater.exe Task: C:\Windows\Tasks\PC SpeedUp Service Deactivator.job => C:\Program Files (x86)\PC Beschleunigen\PCSUSD.exe ==================== Loaded Modules (whitelisted) ============= 2013-07-29 12:23 - 2012-06-05 08:39 - 00289544 _____ () C:\Program Files (x86)\PC Beschleunigen\PCSUService.exe 2014-02-06 16:13 - 2014-02-06 16:13 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll 2014-02-06 16:19 - 2014-02-06 16:19 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll 2014-01-27 21:45 - 2014-01-27 21:45 - 00710976 _____ () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe 2014-01-16 16:06 - 2014-01-16 16:06 - 00167936 _____ () c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe 2013-11-20 11:34 - 2013-11-20 11:34 - 00317952 _____ () c:\Program Files\SavingsbullFilter\ProtocolFilters.dll 2013-11-20 11:35 - 2013-11-20 11:35 - 00110080 _____ () c:\Program Files\SavingsbullFilter\nfapi.dll 2014-01-25 04:24 - 2014-02-21 08:09 - 00111392 _____ () C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe 2014-01-27 20:18 - 2014-02-21 08:12 - 00111392 _____ () C:\Program Files (x86)\SecretSauce\bin\utilSecretSauce.exe 2014-02-15 08:47 - 2014-02-15 08:47 - 00061456 _____ () C:\Users\Natrecia\AppData\Roaming\VOPackage\VOsrv.exe 2012-07-02 10:16 - 2012-07-02 10:16 - 00695448 _____ () C:\Users\Natrecia\AppData\Roaming\BrowserCompanion\tbhcn.exe 2011-07-24 21:18 - 2011-02-25 16:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll 2011-07-24 21:18 - 2011-02-25 16:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll 2013-07-29 12:23 - 2012-01-16 21:06 - 00577621 _____ () C:\Program Files (x86)\PC Beschleunigen\sqlite3.dll 2014-02-22 19:13 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll 2014-02-22 19:13 - 2013-07-15 16:53 - 01717936 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll 2014-02-22 19:13 - 2013-02-28 16:53 - 00168448 _____ () C:\Program Files (x86)\WinZip Malware Protector\UNRAR.DLL 2014-01-28 14:26 - 2014-01-28 14:26 - 00337920 _____ () C:\Program Files (x86)\SecretSauce\bin\sqlite3.DLL 2011-07-24 20:44 - 2011-03-05 15:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00034848 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00056864 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\srau.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00150560 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00112672 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 01981472 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00055840 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\spbl.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00013344 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\siem.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00049184 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\sppsm.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00728096 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00082464 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00014368 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00017440 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00031264 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\srut.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00020512 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\srsbs.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00057888 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00014880 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\srpdm.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00014368 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\sgml.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00053280 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00048160 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\MACTrackBarLib.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00026144 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00025632 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll 2013-10-31 15:17 - 2013-10-31 15:17 - 00193056 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\sgmu.dll 2013-10-31 15:16 - 2013-10-31 15:16 - 00068640 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll 2013-10-31 16:26 - 2013-10-31 16:26 - 00248864 _____ () C:\Users\Natrecia\AppData\Local\Smartbar\Application\srns.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 02118032 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtCore4.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 07008656 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtGui4.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 02089360 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtDeclarative4.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 01270160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtScript4.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 00192912 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtSql4.dll 2011-04-24 23:13 - 2011-04-24 23:13 - 00758160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\QtNetwork4.dll 2011-04-20 19:56 - 2011-04-20 19:56 - 00025088 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll 2011-10-19 12:19 - 2011-10-19 12:19 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4e9b7539f4ee5b2b6af870f8fd7dbde7\IsdiInterop.ni.dll 2011-07-24 20:30 - 2010-09-13 17:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2011-07-24 22:32 - 2012-05-14 16:00 - 01952696 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2011-02-18 10:18 - 2011-02-18 10:18 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll 2014-02-21 09:21 - 2014-02-21 09:21 - 16265096 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: Apoint => %ProgramFiles%\Apoint\Apoint.exe MSCONFIG\startupreg: Facebook Update => "C:\Users\Natrecia\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7.7\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Atheros AR3011 Bluetooth(R) Adapter Description: Atheros AR3011 Bluetooth(R) Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Atheros Communications Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (02/24/2014 00:14:19 PM) (Source: SampleCollector) (User: ) Description: init_sstates_file:CreateFile:Prev_SState: Failed with error 0x20: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Error: (02/24/2014 07:58:00 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:58:00 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:58:00 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:56:45 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:56:45 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:56:45 AM) (Source: ESENT) (User: ) Description: Catalog Database (1296) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/24/2014 07:50:19 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/23/2014 05:04:39 PM) (Source: ESENT) (User: ) Description: Catalog Database (1220) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). Error: (02/23/2014 05:04:39 PM) (Source: ESENT) (User: ) Description: Catalog Database (1220) Catalog Database: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 8, PgnoRoot: 35) von Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb (1901 => 2611, Catalog Database0). System errors: ============= Error: (02/24/2014 08:01:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (02/24/2014 07:57:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 10 für Windows 7 für x64-basierte Systeme Error: (02/24/2014 07:48:39 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 23.02.2014 um 21:49:56 unerwartet heruntergefahren. Error: (02/23/2014 05:06:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (02/23/2014 05:03:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 10 für Windows 7 für x64-basierte Systeme Error: (02/23/2014 04:56:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/23/2014 04:56:00 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht. Error: (02/23/2014 04:55:28 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 22.02.2014 um 23:43:11 unerwartet heruntergefahren. Error: (02/22/2014 10:24:14 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (02/22/2014 10:22:15 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 10 für Windows 7 für x64-basierte Systeme Microsoft Office Sessions: ========================= Error: (02/24/2014 00:14:19 PM) (Source: SampleCollector)(User: ) Description: init_sstates_file:CreateFile:Prev_SState: Failed with error 0x20: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Error: (02/24/2014 07:58:00 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:58:00 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:58:00 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:56:45 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:56:45 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:56:45 AM) (Source: ESENT)(User: ) Description: Catalog Database1296Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/24/2014 07:50:19 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/23/2014 05:04:39 PM) (Source: ESENT)(User: ) Description: Catalog Database1220Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 Error: (02/23/2014 05:04:39 PM) (Source: ESENT)(User: ) Description: Catalog Database1220Catalog Database: -327835C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb190126111187 ==================== Memory info =========================== Percentage of memory in use: 45% Total physical RAM: 4077.86 MB Available physical RAM: 2215.46 MB Total Pagefile: 8153.91 MB Available Pagefile: 5466.39 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:452.15 GB) (Free:360.48 GB) NTFS Drive d: (SONATA_VOLUME) (CDROM) (Total:4.3 GB) (Free:0 GB) UDF Drive e: (Sims2_EP5_1) (CDROM) (Total:0.71 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: DCC2998C) Partition: GPT Partition Type. ==================== End Of Log ============================ |
25.02.2014, 17:32 | #4 |
/// the machine /// TB-Ausbilder | Wörter sind doppelt blau untersrichen hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.02.2014, 20:04 | #5 |
| Wörter sind doppelt blau untersrichen Okay werde ich machen , vielen Dank |
26.02.2014, 14:38 | #6 |
/// the machine /// TB-Ausbilder | Wörter sind doppelt blau untersrichen ok
__________________ --> Wörter sind doppelt blau untersrichen |
26.02.2014, 15:30 | #7 |
| Wörter sind doppelt blau untersrichen Ich komme damit nicht klar das erstellt das iwie nicht :// gibts da nicht ne leichtere lösung |
27.02.2014, 13:49 | #8 |
/// the machine /// TB-Ausbilder | Wörter sind doppelt blau untersrichen Was genau geht nicht?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.02.2014, 14:54 | #9 |
| Wörter sind doppelt blau untersrichen Combofix geht iwie nicht .. das erstellt nix und arbeitet auch nicht :/ |
28.02.2014, 14:06 | #10 |
/// the machine /// TB-Ausbilder | Wörter sind doppelt blau untersrichen Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Wörter sind doppelt blau untersrichen |
ahnung, bitte um hilfe, blau, blau unterstrichen, doppel, doppelt, eingefangen, fenster, gefangen, große, hilfe, keine ahnung, komplett, laptop, prgramm, probleme, schließe, schließen, schließen sich, tagen, unterstrichen, von selbst, weiteren, wörter, öffnen |