|
Plagegeister aller Art und deren Bekämpfung: firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefensterWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.03.2014, 20:38 | #1 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster ich habe in firefox auf websites links drinnen (blaue schrift - unterstrichen - grüner kreis mit pfeil), wenn ich diese worte anklicke komme ich auf Werbeseiten. Außerdem öffnen sich ständig irgendwelche werbefenster im Hintergrund, wenn ich irgendetwas anklicke! Ich hoffe, dass mir jemand helfen kann, hab schon verschiedenen Malwareentferner benutzt helfen nichts. Weiß nicht was ich noch tun kann! Vielen Dank |
02.03.2014, 07:17 | #2 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
02.03.2014, 18:52 | #3 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Vielen dank - es ist für mich jetzt das erste Mal, dass ich hier schreibe, ich kenn mich nicht so gut aus!
__________________anbei die Frst.txt wo finde ich die Addition.txt? |
02.03.2014, 18:58 | #4 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Ist es diese? |
02.03.2014, 19:01 | #5 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster addition.txt |
03.03.2014, 14:30 | #6 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ --> firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster |
04.03.2014, 13:20 | #7 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2014 02 Ran by Sabine (administrator) on A-VAIO on 02-03-2014 18:44:28 Running from C:\Users\Sabine\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe (Sony Corporation) C:\Program Files\Sony\VCM Manager Settings\VcmMgrNotification64.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (ArcSoft, Inc.) c:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\sysWow64\SearchProtocolHost.exe (Mozilla Corporation) C:\Program Files (x86)\komm\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\DelayLoad.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-11-14] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-11-14] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2011-06-22] (Synaptics Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PMBVolumeWatcher] - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [651832 2011-08-24] (Sony Corporation) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-27] (AVAST Software) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1573184 2013-12-13] (IObit) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\.DEFAULT\...\Run: [Advanced SystemCare 6] - "C:\Program Files (x86)\anwend\Advanced SystemCare 6\ASCTray.exe" /AutoStart HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [AdobeBridge] - [X] HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [ISUSPM] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [205480 2007-08-30] (Macrovision Corporation) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\MountPoints2: {a8b55366-eeaa-11e1-84f2-30f9edf0e431} - E:\autorun.exe SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nl.search.yahoo.com/?type=198484&fr=spigot-yhp-ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = SearchScopes: HKCU - {47F46A14-4D18-4536-BB60-27797C7C90D3} URL = hxxp://nl.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {238F6F83-B8B4-11CF-8771-00A024541EE3} https://ras.alphabet.com/dana/download/icaweb-10.2.cab?url=/dana/term/winlaunchterm.cgi?op=DownloadCitrixCab DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ras.alphabet.com/dana-cached/sc/JuniperSetupClient.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.54.40.25 212.54.35.25 FireFox: ======== FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default FF DefaultSearchEngine: Yahoo! FF SearchEngineOrder.1: Ask Search FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Yahoo! FF Homepage: www.google.de FF Keyword.URL: hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @ABNAMRO/BECON,version=1.00 - C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll (ABN AMRO) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Extension: HDvid Codec V6.0 - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-01-28] FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\ascsurfingprotection@iobit.com [2014-02-25] FF Extension: Slick Savings - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\savingsslider@mybrowserbar.com [2014-02-25] FF Extension: Start Page - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-02-25] FF Extension: qualitink - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\firefox@qualitink.net.xpi [2013-10-05] FF Extension: GMX MailCheck - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\toolbar@gmx.net.xpi [2013-03-21] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Ads Removal) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-03-01] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-07-05] (Atheros) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-27] (AVAST Software) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [111776 2011-08-25] (Atheros Communication Inc.) R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation) S4 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-07-25] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-07-25] (Secunia) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation) R2 uCamMonitor; c:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation) S2 RoxLiveShare9; "C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X] ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-27] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-27] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-27] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-27] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-18] () R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) S3 e.dentifier2; C:\Windows\System32\DRIVERS\aabed2.sys [28672 2008-03-20] (Todos Data System AB) R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2013-03-05] (Siemens Home and Office Communication Devices GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2014-03-01] (Intel Corporation) R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com) S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) R2 risdsnpe; C:\Windows\system32\drivers\risdsnxc64.sys [98816 2011-06-23] (REDC) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit) R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com) S3 HSPADataCardusbmdm; system32\DRIVERS\HSPADataCardusbmdm.sys [X] S3 HSPADataCardusbnmea; system32\DRIVERS\HSPADataCardusbnmea.sys [X] S3 HSPADataCardusbser; system32\DRIVERS\HSPADataCardusbser.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-02 18:44 - 2014-03-02 18:44 - 00000000 ____D () C:\Users\Sabine\Desktop\FRST-OlderVersion 2014-03-01 20:13 - 2014-03-01 20:13 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2014-03-01 20:08 - 2014-03-01 20:08 - 01582904 _____ (ESET) C:\Users\Sabine\Downloads\eset_smart_security_live_installer_v7.exe 2014-03-01 19:48 - 2014-03-01 19:48 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-01 19:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-01 19:46 - 2014-03-02 18:44 - 00025806 _____ () C:\Users\Sabine\Desktop\FRST.txt 2014-03-01 19:43 - 2014-03-01 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-01 19:43 - 2014-03-01 19:43 - 00062139 _____ () C:\Users\Sabine\Downloads\Addition.txt 2014-03-01 19:42 - 2014-03-02 18:44 - 02156544 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe 2014-03-01 19:42 - 2014-03-02 18:44 - 00000000 ____D () C:\FRST 2014-03-01 19:39 - 2014-03-01 19:40 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(2).exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST.exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(1).exe 2014-03-01 19:27 - 2014-03-01 19:43 - 00058484 _____ () C:\Users\Sabine\Downloads\FRST.txt 2014-03-01 19:22 - 2014-03-01 19:30 - 00000000 ____D () C:\AdwCleaner 2014-03-01 19:22 - 2014-03-01 19:22 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner.exe 2014-03-01 19:05 - 2014-03-02 18:36 - 00008972 _____ () C:\Windows\PFRO.log 2014-03-01 19:04 - 2014-03-01 19:04 - 00000000 _____ () C:\asc_rdflag 2014-03-01 19:02 - 2014-03-01 19:02 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\TrojanHunter 2014-03-01 17:54 - 2014-03-01 17:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2014-03-01 17:53 - 2014-03-01 17:53 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-03-01 17:48 - 2014-03-02 18:36 - 00000982 _____ () C:\Windows\setupact.log 2014-03-01 17:48 - 2014-03-01 17:48 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 17:37 - 2014-03-01 17:37 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-03-01 17:37 - 2014-03-01 17:37 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-03-01 17:36 - 2014-03-01 17:37 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-03-01 17:36 - 2014-03-01 17:36 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-03-01 17:31 - 2014-03-01 17:54 - 00000000 ____D () C:\DrvInstall 2014-03-01 17:29 - 2014-03-01 19:19 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5 2014-03-01 17:29 - 2014-03-01 17:29 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll 2014-03-01 17:25 - 2014-03-01 17:25 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan 2014-03-01 17:25 - 2014-03-01 17:25 - 00001184 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-03-01 17:25 - 2014-03-01 17:25 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Google 2014-03-01 17:24 - 2014-03-01 17:24 - 00001177 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-02-26 19:32 - 2014-02-26 19:32 - 00000000 ____D () C:\Users\A\AppData\Local\Skype 2014-02-25 13:17 - 2014-02-25 13:17 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-02-19 17:14 - 2014-02-19 17:16 - 00000000 ____D () C:\Users\Sabine\Documents\My Kindle Content 2014-02-18 19:09 - 2014-02-27 19:38 - 00388289 _____ () C:\Users\A\AppData\Local\QC_140217.log 2014-02-17 12:59 - 2014-02-17 12:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-02-12 21:17 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-12 21:17 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-12 21:16 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-12 21:16 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-12 21:16 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-12 21:16 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-12 21:16 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-12 21:16 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-12 21:16 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-12 21:16 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-12 21:16 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-12 21:16 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-12 21:16 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-12 21:16 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-12 21:16 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-12 21:16 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-12 21:16 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-12 21:16 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-12 21:16 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-12 21:16 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-12 21:16 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-12 21:16 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-12 21:16 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-12 21:16 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-12 21:16 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-12 21:16 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-12 21:16 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-12 21:16 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-12 21:16 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-12 21:16 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-12 21:16 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-12 21:16 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-12 21:16 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-12 21:16 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-12 21:16 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-12 21:16 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-12 21:16 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-12 21:16 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-12 21:16 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-12 21:16 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-12 21:16 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-12 13:23 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-12 13:23 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-12 13:23 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 13:23 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-12 13:23 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-12 13:23 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-12 13:22 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-12 13:22 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-12 13:22 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-12 13:22 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-12 13:22 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-12 13:21 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-12 13:21 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-12 13:21 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-12 13:21 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-09 11:29 - 2014-02-09 11:29 - 00001047 _____ () C:\Users\Public\Desktop\MediaMonkey.lnk 2014-02-09 11:28 - 2014-02-09 11:28 - 15173224 _____ (Ventis Media Inc. ) C:\Users\A\Downloads\MediaMonkey_4.1.0.1692.exe 2014-02-01 18:32 - 2014-02-01 18:32 - 00000000 ____D () C:\Program Files (x86)\posterXXL Designer 2014-01-31 19:29 - 2014-02-06 19:46 - 00109285 _____ () C:\Users\Sabine\AppData\Local\QC_140128.log ==================== One Month Modified Files and Folders ======= 2014-03-02 18:45 - 2014-03-01 19:46 - 00025806 _____ () C:\Users\Sabine\Desktop\FRST.txt 2014-03-02 18:44 - 2014-03-02 18:44 - 00000000 ____D () C:\Users\Sabine\Desktop\FRST-OlderVersion 2014-03-02 18:44 - 2014-03-01 19:42 - 02156544 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe 2014-03-02 18:44 - 2014-03-01 19:42 - 00000000 ____D () C:\FRST 2014-03-02 18:41 - 2014-01-24 13:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-02 18:40 - 2013-09-14 14:56 - 01112673 _____ () C:\Windows\WindowsUpdate.log 2014-03-02 18:40 - 2012-10-27 10:56 - 00000000 ____D () C:\Users\A\Outlook-Dateien 2014-03-02 18:40 - 2012-08-24 22:01 - 00000000 ____D () C:\Users\Sabine\Documents\Outlook-Dateien 2014-03-02 18:39 - 2013-05-29 19:58 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-03-02 18:39 - 2012-09-10 19:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-03-02 18:38 - 2013-12-14 17:00 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-03-02 18:36 - 2014-03-01 19:05 - 00008972 _____ () C:\Windows\PFRO.log 2014-03-02 18:36 - 2014-03-01 17:48 - 00000982 _____ () C:\Windows\setupact.log 2014-03-02 18:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-01 20:13 - 2014-03-01 20:13 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2014-03-01 20:08 - 2014-03-01 20:08 - 01582904 _____ (ESET) C:\Users\Sabine\Downloads\eset_smart_security_live_installer_v7.exe 2014-03-01 19:48 - 2014-03-01 19:48 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-01 19:43 - 2014-03-01 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-01 19:43 - 2014-03-01 19:43 - 00062139 _____ () C:\Users\Sabine\Downloads\Addition.txt 2014-03-01 19:43 - 2014-03-01 19:27 - 00058484 _____ () C:\Users\Sabine\Downloads\FRST.txt 2014-03-01 19:40 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(2).exe 2014-03-01 19:40 - 2009-07-14 05:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-01 19:40 - 2009-07-14 05:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST.exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(1).exe 2014-03-01 19:30 - 2014-03-01 19:22 - 00000000 ____D () C:\AdwCleaner 2014-03-01 19:22 - 2014-03-01 19:22 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner.exe 2014-03-01 19:19 - 2014-03-01 17:29 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5 2014-03-01 19:12 - 2012-02-10 09:50 - 00769386 _____ () C:\Windows\system32\perfh007.dat 2014-03-01 19:12 - 2012-02-10 09:50 - 00176084 _____ () C:\Windows\system32\perfc007.dat 2014-03-01 19:12 - 2009-07-14 06:13 - 01816098 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-01 19:07 - 2012-11-08 20:36 - 00000000 ____D () C:\ProgramData\IObit 2014-03-01 19:05 - 2013-12-16 06:56 - 105988096 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak 2014-03-01 19:04 - 2014-03-01 19:04 - 00000000 _____ () C:\asc_rdflag 2014-03-01 19:04 - 2013-12-16 06:56 - 00925696 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak 2014-03-01 19:04 - 2013-12-16 06:56 - 00098304 _____ () C:\Windows\system32\config\SAM.iodefrag.bak 2014-03-01 19:04 - 2013-12-16 06:56 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak 2014-03-01 19:04 - 2012-08-24 21:09 - 00000000 ____D () C:\Users\Sabine 2014-03-01 19:04 - 2012-08-24 20:02 - 00000000 ____D () C:\Users\A 2014-03-01 19:02 - 2014-03-01 19:02 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\TrojanHunter 2014-03-01 17:54 - 2014-03-01 17:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2014-03-01 17:54 - 2014-03-01 17:31 - 00000000 ____D () C:\DrvInstall 2014-03-01 17:53 - 2014-03-01 17:53 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-03-01 17:51 - 2011-06-27 08:47 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2014-03-01 17:50 - 2012-02-10 10:14 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-01 17:48 - 2014-03-01 17:48 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 17:38 - 2012-02-10 10:13 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-03-01 17:37 - 2014-03-01 17:37 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:36 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-03-01 17:37 - 2013-10-14 14:24 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-03-01 17:36 - 2012-02-10 10:13 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-03-01 17:36 - 2012-02-10 10:13 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-03-01 17:35 - 2012-02-10 10:13 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-03-01 17:35 - 2012-02-10 10:13 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-03-01 17:29 - 2014-03-01 17:29 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll 2014-03-01 17:25 - 2014-03-01 17:25 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan 2014-03-01 17:25 - 2014-03-01 17:25 - 00001184 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-03-01 17:25 - 2014-03-01 17:25 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Google 2014-03-01 17:25 - 2013-02-08 20:05 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-03-01 17:24 - 2014-03-01 17:24 - 00001177 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-03-01 13:48 - 2012-09-02 14:01 - 00000000 ____D () C:\Users\A\Documents\01 neue Dateien zum Aussortieren 2014-03-01 12:22 - 2013-01-02 19:56 - 00000000 ____D () C:\Users\A\Documents\Outlook-Dateien 2014-03-01 12:22 - 2012-09-02 14:33 - 00000000 ____D () C:\Users\A\Documents\80 BMW Büro 2014-03-01 12:21 - 2012-12-28 13:48 - 00000000 ____D () C:\Users\A\Documents\90 DANIEL 2014-03-01 12:21 - 2012-10-21 15:51 - 00000000 ____D () C:\Users\A\Documents\18 Wohnung in WB 2014-03-01 12:21 - 2012-09-02 14:19 - 00000000 ____D () C:\Users\A\Documents\11 Bank 2014-03-01 11:36 - 2013-12-16 06:56 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak 2014-02-28 21:38 - 2013-11-28 20:22 - 00000000 ____D () C:\Users\A\AppData\Roaming\MediaMonkey 2014-02-28 19:29 - 2013-06-18 20:51 - 00017786 _____ () C:\Users\A\AppData\Local\LayoutPanels.xml 2014-02-28 19:29 - 2013-06-18 20:51 - 00012577 _____ () C:\Users\A\AppData\Local\Layout_Card.xml 2014-02-28 19:29 - 2013-06-18 19:51 - 00021628 _____ () C:\Users\A\AppData\Local\Layout.xml 2014-02-28 19:29 - 2012-09-14 21:32 - 17367040 _____ () C:\Users\A\AppData\Local\QC_log.LDF 2014-02-28 19:29 - 2012-09-14 21:32 - 07995392 _____ () C:\Users\A\AppData\Local\QC.mdf 2014-02-28 19:29 - 2012-09-14 21:32 - 00003748 _____ () C:\Users\A\AppData\Local\QC.ini 2014-02-28 19:27 - 2012-09-14 21:32 - 00395621 _____ () C:\Users\A\AppData\Local\QC.log 2014-02-28 19:25 - 2012-09-14 21:32 - 00020128 _____ () C:\Users\A\AppData\Local\LayoutPanels_Default.xml 2014-02-28 19:04 - 2012-08-24 20:10 - 00000000 ____D () C:\Users\A\AppData\Local\Adobe 2014-02-27 19:38 - 2014-02-18 19:09 - 00388289 _____ () C:\Users\A\AppData\Local\QC_140217.log 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-02-26 21:24 - 2012-10-20 20:55 - 00000000 ____D () C:\Users\A\AppData\Roaming\Skype 2014-02-26 21:18 - 2012-08-26 14:20 - 00000000 ___RD () C:\Users\A\Desktop\Util 2014-02-26 19:32 - 2014-02-26 19:32 - 00000000 ____D () C:\Users\A\AppData\Local\Skype 2014-02-26 19:32 - 2013-04-09 14:50 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-26 19:32 - 2012-02-10 11:42 - 00000000 ____D () C:\ProgramData\Skype 2014-02-25 13:18 - 2012-08-24 21:09 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Adobe 2014-02-25 13:17 - 2014-02-25 13:17 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-02-25 13:16 - 2014-01-11 14:47 - 00002852 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Sabine 2014-02-25 13:16 - 2013-11-01 21:09 - 00003096 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor 2014-02-24 20:13 - 2012-11-06 21:23 - 00000000 ____D () C:\Users\Sabine\Documents\00 neue Dateien Aussortieren 2014-02-24 20:08 - 2012-08-31 17:09 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Skype 2014-02-24 14:08 - 2013-04-01 16:38 - 00002216 ____H () C:\Users\Sabine\Documents\Default.rdp 2014-02-23 21:00 - 2013-12-23 21:15 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\MediaMonkey 2014-02-21 18:41 - 2014-01-24 13:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-21 18:41 - 2012-09-02 09:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-21 18:41 - 2012-02-10 10:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-21 18:32 - 2012-11-04 19:32 - 00000000 ____D () C:\Users\A\Documents\50 Ziggo 2014-02-19 17:16 - 2014-02-19 17:14 - 00000000 ____D () C:\Users\Sabine\Documents\My Kindle Content 2014-02-19 13:13 - 2012-09-02 14:04 - 00000000 ____D () C:\Users\A\Documents\10 abgeschlossen 2014-02-17 19:49 - 2013-07-18 20:31 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 19:46 - 2012-08-25 11:15 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-17 12:59 - 2014-02-17 12:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-02-16 14:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-15 18:35 - 2012-08-25 12:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-13 18:34 - 2014-01-30 19:58 - 00162800 _____ () C:\Users\A\AppData\Local\QC_140129.log 2014-02-12 21:24 - 2012-08-24 21:43 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-12 21:19 - 2011-02-11 00:03 - 01790378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 21:17 - 2009-07-14 03:34 - 00000510 _____ () C:\Windows\win.ini 2014-02-10 19:29 - 2012-11-13 20:31 - 17367040 _____ () C:\Users\Sabine\AppData\Local\QC_log.LDF 2014-02-10 19:29 - 2012-11-13 20:31 - 07995392 _____ () C:\Users\Sabine\AppData\Local\QC.mdf 2014-02-10 19:28 - 2012-11-13 20:31 - 00020128 _____ () C:\Users\Sabine\AppData\Local\LayoutPanels_Default.xml 2014-02-10 19:28 - 2012-11-13 20:31 - 00003773 _____ () C:\Users\Sabine\AppData\Local\QC.ini 2014-02-10 19:28 - 2012-11-13 20:30 - 00110647 _____ () C:\Users\Sabine\AppData\Local\QC.log 2014-02-09 15:59 - 2013-10-21 13:24 - 00000000 ____D () C:\Users\Sabine\AppData\Local\CrashDumps 2014-02-09 15:48 - 2013-11-27 22:39 - 00000000 ____D () C:\Users\A\AppData\Roaming\vlc 2014-02-09 11:29 - 2014-02-09 11:29 - 00001047 _____ () C:\Users\Public\Desktop\MediaMonkey.lnk 2014-02-09 11:29 - 2013-11-28 20:22 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey 2014-02-09 11:28 - 2014-02-09 11:28 - 15173224 _____ (Ventis Media Inc. ) C:\Users\A\Downloads\MediaMonkey_4.1.0.1692.exe 2014-02-07 22:30 - 2014-01-06 19:46 - 00000000 ____D () C:\Users\A\AppData\Roaming\EurekaLog 2014-02-06 20:30 - 2013-08-07 10:33 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\vlc 2014-02-06 19:50 - 2013-06-17 19:43 - 00017781 _____ () C:\Users\Sabine\AppData\Local\LayoutPanels.xml 2014-02-06 19:50 - 2013-06-17 19:43 - 00012577 _____ () C:\Users\Sabine\AppData\Local\Layout_Card.xml 2014-02-06 19:50 - 2013-06-17 19:41 - 00025672 _____ () C:\Users\Sabine\AppData\Local\Layout.xml 2014-02-06 19:46 - 2014-01-31 19:29 - 00109285 _____ () C:\Users\Sabine\AppData\Local\QC_140128.log 2014-02-06 19:46 - 2013-06-21 20:09 - 00000679 _____ () C:\Users\Sabine\Documents\ex.csv 2014-02-06 15:10 - 2013-11-12 17:42 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-02-06 15:10 - 2012-12-22 16:59 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\DVDVideoSoft 2014-02-06 13:16 - 2014-02-12 21:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-12 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-12 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-12 21:16 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-12 21:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-12 21:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-12 21:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-12 21:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-12 21:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-12 21:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-12 21:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-12 21:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-12 21:16 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-12 21:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-12 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-12 21:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-12 21:16 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-12 21:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-12 21:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-12 21:16 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-12 21:16 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-12 21:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-12 21:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-12 21:16 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-12 21:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-12 21:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-12 21:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-12 21:16 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-12 21:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-12 21:16 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-12 21:16 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-12 21:16 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-12 21:16 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-12 21:16 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-12 21:16 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-12 21:16 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-12 21:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-12 21:16 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-12 21:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-02 20:28 - 2013-12-31 13:02 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\EurekaLog 2014-02-01 22:20 - 2012-09-29 10:59 - 00000000 ____D () C:\Users\Sabine\AppData\Local\FreePDF_XP 2014-02-01 18:32 - 2014-02-01 18:32 - 00000000 ____D () C:\Program Files (x86)\posterXXL Designer 2014-01-31 22:30 - 2013-01-01 17:28 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\AllDup 2014-01-31 21:22 - 2012-12-31 21:04 - 00000000 ____D () C:\ProgramData\AllDup Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.23964.dll Some content of TEMP: ==================== C:\Users\A\AppData\Local\Temp\sfamcc00001.dll C:\Users\A\AppData\Local\Temp\sfareca00001.dll C:\Users\Sabine\AppData\Local\Temp\Quarantine.exe C:\Users\Sabine\AppData\Local\Temp\sfamcc00001.dll C:\Users\Sabine\AppData\Local\Temp\sfareca00001.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-28 21:45 ==================== End Of Log ============================ --- --- --- |
04.03.2014, 13:23 | #8 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefensterCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-03-2014 Ran by Sabine at 2014-03-01 19:43:05 Running from C:\Users\Sabine\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== ABN AMRO e.dentifier2 software (HKLM-x32\...\{55BF7E3E-F00A-4A3D-BB76-09228B35FFD6}) (Version: 02.00 - ABN AMRO BANK) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden Adobe Community Help (x32 Version: 3.2.1 - Adobe Systems Incorporated) Hidden Adobe Digital Editions (HKLM-x32\...\Digital Editions) (Version: - ) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated) Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe PDF ePub DRM Removal 4.1.6 (HKLM-x32\...\{C9DD56CA-BAE9-452A-AFE9-834C7770D1A3}) (Version: 4.1.6 - EPUBSOFT) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 9 (x32 Version: 9.0.3.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 9 (x32 Version: 9.0.1 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.8) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.8 - Adobe Systems Incorporated) Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.2.0 - IObit) AllDup 3.4.13 (HKLM-x32\...\AllDup_is1) (Version: 3.4.13 - Michael Thummerer Software Design) Amazon Kindle (HKCU\...\Amazon Kindle) (Version: - Amazon) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{B1893E3F-9BDF-443F-BED0-1AAA2D9E0D68}) (Version: 2.0.1.154 - ArcSoft) ArcSoft WebCam Companion 4 (HKLM-x32\...\{B77DE05C-7C84-4011-B93F-A29D0D2840F4}) (Version: 4.0.21.485 - ArcSoft) Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros) Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team) AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2008628478.48.56.39064954 - Audible, Inc.) Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber) Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2013 - Avast Software) Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.04.000.82 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{91CF16EE-876D-4409-9E3F-030BCDED616F}) (Version: 1.6.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform) Citrix Presentation Server Web Client for Win32 (HKLM-x32\...\Citrix ICA Web Client) (Version: - ) CloudReading (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.0.27.1025 - Foxit Corporation) Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.6.124 - Corel Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{81FB7C60-565A-4869-9D90-3BE1D270E8B7}) (Version: - Microsoft) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.6 - Dolby Laboratories Inc) Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.2 - IObit) Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Elements STI Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.1.1.1031 - Foxit Corporation) Free YouTube Download version 3.2.20.1230 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.) FreeCommander 2009.02b (HKLM-x32\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski) FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - ) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Gigaset QuickSync (HKLM\...\{18E951F2-329A-4ED2-833B-D980960DB29E}) (Version: 8.2.0865.2 - Gigaset Communications GmbH) GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) IObit Apps Toolbar v8.8 (HKLM-x32\...\{B2A36391-A3A9-4293-88B2-A8263EC7F865}) (Version: 8.8 - Spigot, Inc.) <==== ATTENTION IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.2.1 - IObit) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.1.8.2434 - IObit) iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Juniper Citrix Services Client (HKCU\...\Juniper_Citrix_Services) (Version: 7.1.15.25271 - Juniper Networks) Juniper Networks, Inc. Setup Client (HKCU\...\Juniper_Setup_Client) (Version: 7.1.15.36013 - Juniper Networks, Inc.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KUx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden Media Gallery (Version: 2.0.0.11150 - Sony Corporation) Hidden MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.) Mediapurge (HKLM-x32\...\Mediapurge) (Version: 1.10 - Peter Lorenz) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Common Files (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Services (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Shared (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Native Client (HKLM\...\{12FE6AA6-65D2-40EE-B925-62193128A0E6}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 RsFx Driver (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{EF18EF0F-96D3-4A6B-9600-2197F1720A15}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Miro (HKLM-x32\...\Miro) (Version: 6.0 - Participatory Culture Foundation) Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MP4 To MP3 Converter V3.0 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version: - hxxp://www.MP4ToMP3Converter.net) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MusicBee 2.2 (HKLM-x32\...\MusicBee) (Version: 2.2 - Steven Mayall) NEF Codec (HKLM-x32\...\{D6506521-0959-4FA3-875F-E2E28830B0D2}) (Version: 1.00.0000 - Nikon) NVIDIA 3D Vision Video Player (HKLM-x32\...\{7BF8BD5F-EE1A-4DB1-B810-A4AE1D34530E}) (Version: 1.7.2 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation) NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge) PeaZip configuration (WIN64) (HKLM\...\{4F8D60A8-C53D-47BD-AE5C-31AE6566D638}_is1) (Version: - Giorgio Tani) PhotoLine 18.0.1.0 (HKLM\...\PhotoLine_is1) (Version: 18.0.1.0 - Computerinsel GmbH) PlayMemories Home Plug-in (Version: 2.0.00.14170 - Sony Corporation) Hidden PlayMemories Home/PMB VAIO Edition Plug-in 3D Theme Data (x32 Version: 1.0.00.16130 - Sony Corporation) Hidden PlayMemories Home/PMB VAIO Edition Plug-in Ver.2.2 Upgrade Program (x32 Version: 2.2.00.18250 - Sony Corporation) Hidden PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.8.02.10270 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.7.00.10100 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.7.00.10100 - Sony Corporation) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden PureSync (x32 Version: 3.7.9 - Jumping Bytes) Hidden PureSync 3.7.9 (HKLM-x32\...\PureSync) (Version: 3.7.9 - Jumping Bytes) PYV_x86 (x32 Version: 1.0.0 - Sony Corporation) Hidden Qualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) Hidden Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.8.1 - Sony Corporation) Quick Web Access (x32 Version: 1.4.8.1 - Sony Corporation) Hidden QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) QuoteCompiler (HKCU\...\ec817b7729952bce) (Version: 2.0.0.1 - finanzkasper.de) R für Windows (HKLM-x32\...\R für Windows) (Version: - ) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6400 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform) RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - ) Remote Keyboard (x32 Version: 1.2.0.09270 - Sony Corporation) Hidden Remote Play with PlayStation(R)3 (x32 Version: 1.1.0.21090 - Sony Corporation) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden Rosetta Stone Version 3 (HKLM-x32\...\{80F7CA44-F3A5-4853-8BA6-DDF57CD4F078}) (Version: 3.4.7.0 - Rosetta Stone Ltd.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.) Hidden Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.) Secunia PSI (3.0.0.3001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.3001 - Secunia) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Service Pack 3 für SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.0 - IObit) SmartSound Quicktracks for Premiere Elements 9.0 (HKLM-x32\...\InstallShield_{6748E773-5DA0-4D19-8AA5-273B4133A09B}) (Version: 3.12.3090 - SmartSound Software Inc) SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090 - SmartSound Software Inc) Hidden Snap.Do (HKLM-x32\...\{E5537A15-95B8-4C1F-832C-A54A50A1B06E}) (Version: 11.4.1.13233 - ReSoft Ltd.) <==== ATTENTION SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.) Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated) TagScanner 5.1.645 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov) TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer) Tomb Raider 5: Chronicles (HKLM-x32\...\{3A504CA1-8A3B-4281-B074-9B9A57ABE046}_is1) (Version: 1.1 - RAF) TrackID(TM) with BRAVIA (x32 Version: 1.2.0.09270 - Sony Corportaion) Hidden Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{D8125A39-ADEE-4187-B04D-DB6CF489AF61}) (Version: 10.3.5500.0 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{E21274CE-CA0C-49FA-93F4-DC292A052264}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{B5C70C99-B109-42FD-B219-FF12CA543F19}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version: - Microsoft) V3DPx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VAIO - Media Gallery (HKLM-x32\...\{DD696AF7-8A89-41D5-976A-2053E41A69BE}) (Version: 2.0.1.12040 - Sony Corporation) VAIO - PlayMemories Home Plug-in (HKLM-x32\...\InstallShield_{F9395F3D-4198-476C-8C41-63D0B5B51E35}) (Version: 2.2.00.18250 - Sony Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.7.00.10100 - Sony Corporation) VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.21090 - Sony Corporation) VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.2.0.09270 - Sony Corporation) VAIO - Remote-Tastatur mit PlayStation®3 (HKLM-x32\...\{E682702C-609C-4017-99E7-3129C163955F}) (Version: 1.2.0.09210 - Sony Corporation) VAIO - TrackID™ mit BRAVIA (HKLM-x32\...\{2F41EF61-A066-4EBF-84F8-21C1B317A780}) (Version: 1.2.0.09270 - Sony Corporation) VAIO 3D Portal (HKLM-x32\...\{C14EAE86-C526-4E00-B245-CFF86233C3D2}) (Version: 1.2.0.10131 - Sony Corporation) VAIO Care (HKLM\...\{EC635BC0-0D7C-4CA2-9B87-2A330C298CB2}) (Version: 8.1.0.10120 - Sony Corporation) VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 5.1.0.09300 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.8.0.09210 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.8.0.09210 - Sony Corporation) Hidden VAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.1.12200 - Sony Corporation) VAIO Easy Connect (x32 Version: 1.1.1.12200 - Sony Corporation) Hidden VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation) VAIO Gate (x32 Version: 2.4.1.09230 - Sony Corporation) Hidden VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.5.1.09230 - Sony Corporation) VAIO Hero Screensaver - Fall 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Fall 2011 Screensaver) (Version: - ) VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.2.0.09270 - Sony Corporation) VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation) VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.10.2.08270 - Sony Corporation) VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.3.0.08010 - Sony Corporation) VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.5.0.09200 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.6.0.09220 - Sony Corporation) VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VHD (x32 Version: 1.0.0 - Microsoft) Hidden VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: - Elaborate Bytes) VIx64 (Version: 1.0.0 - Sony Corporation) Hidden VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN) VMLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden VSNx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорація Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Wuala (HKCU\...\Wuala) (Version: 1.0.411.0 - LaCie) Wuala CBFS (HKLM-x32\...\Wuala CBFS) (Version: 3.2.107.0 - LaCie) Wuala OverlayIcons (HKLM-x32\...\Wuala OverlayIcons) (Version: 1.0.0.2 - LaCie) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 21-02-2014 13:05:32 Windows Update 25-02-2014 12:12:41 Windows Update 28-02-2014 13:09:14 Windows Update 01-03-2014 16:30:19 Driver Booster : NVIDIA GeForce GT 540M ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {027BE78B-5C23-4A14-871C-F55571E7F4F6} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => net Task: {092B80DD-0543-4C48-9C1F-56FAF9401A15} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2014-02-11] (IObit) Task: {0D25BBAD-0F65-4423-A292-D930187CA477} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {0EB9A183-D585-4685-8434-52D0EAD73B87} - System32\Tasks\AdobeAAMUpdater-1.0-A-VAIO-A => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {1016FF74-BE70-44E0-968A-41B353E77E62} - System32\Tasks\AdobeAAMUpdater-1.0-A-VAIO-Sabine => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {16CBA829-AFE9-4846-AC70-D6BE9AD0C4F4} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-02-13] (IObit) Task: {18529016-1326-4836-A4AB-7F1F5EE99E72} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd) Task: {1B47FCE7-9EDD-41B5-98AD-46CABA28E842} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-01-09] (IObit) Task: {2396B606-3FA5-4A32-9BBE-C35D5C656054} - System32\Tasks\{8ABA7FFD-6F31-4C10-8941-EB0E291EFBEC} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2013-11-15] (Microsoft Corporation) Task: {2585D3D5-B587-42A6-98BB-8CBDDDEB9EB2} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music Sabine => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation) Task: {25BCC20D-6D9F-4538-AC91-868ED8E6CB16} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2011-09-20] (Sony Corporation) Task: {282C9245-A949-4703-8210-9CDF9162B032} - System32\Tasks\{FDA262A3-0CA4-42BC-8417-B2BD1259EA05} => C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [2013-11-15] (Microsoft Corporation) Task: {314D90C2-98EF-4FDB-A767-1F1760FF6394} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated) Task: {31BA6772-040B-4CD9-9DD0-8E970D06AF78} - System32\Tasks\ASC7_SkipUac_A => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-02-14] (IObit) Task: {35233938-09C2-4FB7-A5EF-716DC6CE5F8A} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {3DDC7A26-732E-4391-BD44-E1EC5F873C47} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-08-01] (Sony Corporation) Task: {463081F9-A0C6-4FBD-81B2-CCC4111DF724} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {4E53A04A-6782-4C17-936A-49D2BA836A8F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {59192A76-8601-4B78-94A4-D08AC3865283} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2011-09-20] (Sony Corporation) Task: {64E33F10-5AE0-4CF9-98C9-8B8E337F5BBA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-27] (AVAST Software) Task: {6D2BD6AB-380B-4A2C-BC33-ABB8DBC863DA} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation) Task: {7469EF7E-8482-4396-BB55-D0E8515E6475} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2011-11-03] (Sony Corporation) Task: {77AE9FB4-F3BB-4F08-895A-8B27D243E317} - System32\Tasks\Sony Corporation\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2011-09-20] (Sony Corporation) Task: {8D340865-8797-4AE6-8CDE-62527D9F443E} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {8D68C660-46F9-46C6-9107-BA94A49A618E} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-01-16] (IObit) Task: {96D320CF-7802-4947-B6A7-9162FEF37085} - System32\Tasks\{975C1E69-1F4C-4113-88CF-8753B9CB0FB4} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.10.0.116&LastError=12002 Task: {9B86B277-15CD-4526-B834-F6B2F55DF459} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2011-09-29] (Sony Corporation) Task: {9D6B17D9-DD4D-4A0C-BED6-E99C7A9B982E} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2011-09-29] (Sony Corporation) Task: {B5EC0B30-4EDA-4A4B-9FCF-C5A4A85CB245} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {BBB403B3-9944-4CA1-B847-2D1D87F5ED21} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {BC4FF27A-007A-45F0-B8DA-B50619F2A82D} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {C2AF1B70-A20F-43CC-BBB2-CBD4DC742A07} - System32\Tasks\ASC7_SkipUac_Sabine => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-02-14] (IObit) Task: {CCFFB1F7-A801-4A9A-802E-CF72F39A24FE} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-09-27] (Sony Corporation) Task: {CD2CD52D-068B-4759-BF33-AEAF652CE985} - \Driver Booster Update No Task File Task: {D4DF139D-1A4A-438F-A0CA-25AB48D3460E} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation) Task: {D51D2C6D-BD91-4C8E-B8CE-2EDC7E6C3DD0} - \EPUpdater No Task File Task: {DAB2C8DA-796C-427C-9BDD-B22F363688C4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DBC346FF-24F1-489A-A5F7-0406176643BA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-08-01] (Sony Corporation) Task: {DE3E2054-2C57-4A60-8B3B-97636A4E72A4} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe [2014-01-09] (IObit) Task: {DEF99037-9DE7-4980-A9CC-04C240D6FDEB} - System32\Tasks\Sony Corporation\VAIO Update\VUSU Trigger Task => C:\Program Files\Sony\VAIO Update\VUSUTrigger.exe [2013-08-01] (Sony Corporation) Task: {EAB07F72-51B9-463B-BE30-7B67E577850D} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music A => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation) Task: {F0464F7B-92B5-421C-84D6-90368A85E1C0} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-08-25] (Sony Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-14 14:26 - 2013-12-19 19:53 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-09-29 10:51 - 2010-06-17 20:56 - 00087040 _____ () C:\Windows\System32\redmonnt.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2013-11-01 21:09 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll 2014-03-01 15:38 - 2014-03-01 11:15 - 02186240 _____ () C:\Program Files\AVAST Software\Avast\defs\14030100\algo.dll 2012-10-11 20:56 - 2012-10-11 20:56 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-10-11 20:56 - 2012-10-11 20:56 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-25 19:50 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-10-25 19:50 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-10-25 19:50 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-10-25 19:50 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-10-25 19:50 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2013-11-01 21:09 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl 2013-11-01 21:09 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl 2013-11-01 21:09 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl 2013-11-01 21:09 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll 2012-02-10 10:49 - 2011-09-29 17:14 - 00021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll 2013-10-17 19:59 - 2013-10-17 19:59 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-03-01 17:24 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madExcept_.bpl 2014-03-01 17:24 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madBasic_.bpl 2014-03-01 17:24 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madDisAsm_.bpl 2014-03-01 17:24 - 2013-12-12 18:46 - 08001344 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\WebUI.dll 2014-03-01 17:24 - 2013-10-16 22:17 - 00185168 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\libcurl-4.dll 2014-03-01 17:24 - 2013-05-16 19:26 - 00182080 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll 2014-03-01 17:24 - 2013-05-16 19:26 - 00145216 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll 2013-12-11 10:01 - 2014-02-15 18:33 - 03578992 _____ () C:\Program Files (x86)\komm\Mozilla Firefox\mozjs.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-02-21 18:41 - 2014-02-21 18:41 - 16265096 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll 2014-02-13 13:07 - 2014-02-13 13:07 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c47e2e2c03d9b86042ea6778a682f4bc\IsdiInterop.ni.dll 2012-02-10 10:07 - 2011-01-12 17:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^Users^Sabine^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: Dolby Home Theater v4 => "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart MSCONFIG\startupreg: FreePDF Assistant => "C:\Program Files (x86)\FreePDF_XP\fpassist.exe" MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\util\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files (x86)\util\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/01/2014 07:33:00 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden. Error: (03/01/2014 07:31:38 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.1.0.10100, Zeitstempel: 0x507783bc Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677 Ausnahmecode: 0xc0020001 Fehleroffset: 0x000000000000940d ID des fehlerhaften Prozesses: 0x1814 Startzeit der fehlerhaften Anwendung: 0xVCAgent.exe0 Pfad der fehlerhaften Anwendung: VCAgent.exe1 Pfad des fehlerhaften Moduls: VCAgent.exe2 Berichtskennung: VCAgent.exe3 Error: (03/01/2014 07:06:33 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden. Error: (03/01/2014 06:59:02 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 27.0.1.5156 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2c84 Startzeit: 01cf3577b3601170 Endzeit: 36 Anwendungspfad: C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe Berichts-ID: 271762ed-a16b-11e3-a8f6-844bf5cdfee2 Error: (03/01/2014 06:58:26 PM) (Source: Application Hang) (User: ) Description: Programm DriverBooster.exe, Version 1.2.0.478 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 22b8 Startzeit: 01cf356ad451b406 Endzeit: 9 Anwendungspfad: C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe Berichts-ID: e8d71c75-a16a-11e3-a8f6-844bf5cdfee2 Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service) (User: ) Description: Der Index kann nicht initialisiert werden. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service) (User: ) Description: Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service) (User: ) Description: Das Gatherer-Objekt kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service) (User: ) Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Error: (03/01/2014 11:40:22 AM) (Source: Windows Search Service) (User: ) Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) System errors: ============= Error: (03/01/2014 07:33:49 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (03/01/2014 07:33:38 PM) (Source: Service Control Manager) (User: ) Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (03/01/2014 07:07:15 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (03/01/2014 07:07:01 PM) (Source: Service Control Manager) (User: ) Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (03/01/2014 07:05:26 PM) (Source: volmgr) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (03/01/2014 07:03:22 PM) (Source: DCOM) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (03/01/2014 05:35:15 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (03/01/2014 05:33:51 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (03/01/2014 04:34:17 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (03/01/2014 04:04:16 PM) (Source: ipnathlp) (User: ) Description: 0 Microsoft Office Sessions: ========================= Error: (03/01/2014 07:33:00 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 07:31:38 PM) (Source: Application Error)(User: ) Description: VCAgent.exe8.1.0.10100507783bcKERNELBASE.dll6.1.7601.1822951fb1677c0020001000000000000940d181401cf357b04ce56a6C:\Program Files\Sony\VAIO Care\VCAgent.exeC:\Windows\system32\KERNELBASE.dllb973d920-a16f-11e3-9b34-844bf5cdfee2 Error: (03/01/2014 07:06:33 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 06:59:02 PM) (Source: Application Hang)(User: ) Description: firefox.exe27.0.1.51562c8401cf3577b360117036C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe271762ed-a16b-11e3-a8f6-844bf5cdfee2 Error: (03/01/2014 06:58:26 PM) (Source: Application Hang)(User: ) Description: DriverBooster.exe1.2.0.47822b801cf356ad451b4069C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exee8d71c75-a16a-11e3-a8f6-844bf5cdfee2 Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service)(User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service)(User: ) Description: Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service)(User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/01/2014 11:40:23 AM) (Source: Windows Search Service)(User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (03/01/2014 11:40:22 AM) (Source: Windows Search Service)(User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore CodeIntegrity Errors: =================================== Date: 2013-10-17 17:05:02.784 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-10-17 17:05:02.494 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-10-17 17:05:02.379 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-10-17 17:05:02.292 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-10-17 17:05:00.424 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-10-17 17:05:00.336 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SoftwareDistribution\Download\063027e6e7f854ca44e857370ed18923\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-08-25 19:36:23.402 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-08-25 19:36:23.382 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-08-25 19:36:23.362 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\gpapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-08-25 19:36:23.342 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\gpapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. |
05.03.2014, 12:17 | #9 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.03.2014, 16:09 | #10 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefensterCode:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.05.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16518 Sabine :: A-VAIO [Administrator] Schutz: Deaktiviert 05.03.2014 13:11:57 mbam-log-2014-03-05 (13-11-57).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 278857 Laufzeit: 7 Minute(n), 26 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.020 - Bericht erstellt am 05/03/2014 um 15:55:08 # Aktualisiert 27/02/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Sabine - A-VAIO # Gestartet von : C:\Users\Sabine\Downloads\adwcleaner(1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16518 -\\ Mozilla Firefox v27.0.1 (de) [ Datei : C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\17hp65dn.default\prefs.js ] [ Datei : C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\prefs.js ] [ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\lcnk2lmx.default\prefs.js ] ************************* AdwCleaner[R0].txt - [32401 octets] - [01/03/2014 19:22:46] AdwCleaner[R1].txt - [1136 octets] - [05/03/2014 13:21:42] AdwCleaner[S0].txt - [30299 octets] - [01/03/2014 19:30:47] AdwCleaner[S1].txt - [1058 octets] - [05/03/2014 15:55:08] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1118 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.2 (02.20.2014:1) OS: Windows 7 Home Premium x64 Ran by Sabine on 05.03.2014 at 14:18:28,00 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3901353943-2070415304-2330678088-1003\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(2)_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(2)_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(2)_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(2)_RASMANCS ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{02A384DE-88D9-4892-A48F-3E7CAE208CC3} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{3E74E0E8-9777-43AF-890F-0D6DA6707C6F} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{5F63534A-74C7-4652-A110-8C544AC66AB0} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{829C8730-37FC-423D-9B4E-E405A92D739F} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{BD902133-25C2-44C1-A0B0-29EFEF116FFD} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{C0FE3B54-FFEC-41F0-B3EE-063876C3852E} Successfully deleted: [Empty Folder] C:\Users\Sabine\appdata\local\{EF065197-09B8-42DD-AEBC-DFF32F4617F7} ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05.03.2014 at 14:25:00,72 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter # AdwCleaner v3.020 - Bericht erstellt am 05/03/2014 um 16:05:37 # Aktualisiert 27/02/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Sabine - A-VAIO # Gestartet von : C:\Users\Sabine\Downloads\adwcleaner(1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16518 -\\ Mozilla Firefox v27.0.1 (de) [ Datei : C:\Users\A\AppData\Roaming\Mozilla\Firefox\Profiles\17hp65dn.default\prefs.js ] [ Datei : C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\prefs.js ] [ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\lcnk2lmx.default\prefs.js ] ************************* AdwCleaner[R0].txt - [32401 octets] - [01/03/2014 19:22:46] AdwCleaner[R1].txt - [1136 octets] - [05/03/2014 13:21:42] AdwCleaner[R2].txt - [1256 octets] - [05/03/2014 16:04:09] AdwCleaner[S0].txt - [30299 octets] - [01/03/2014 19:30:47] AdwCleaner[S1].txt - [1198 octets] - [05/03/2014 15:55:08] AdwCleaner[S2].txt - [1178 octets] - [05/03/2014 16:05:38] ########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1238 octets] ########## |
06.03.2014, 12:54 | #11 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefensterESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.03.2014, 18:47 | #12 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefensterCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=c6c23905ef74a347a7f733916a5f0bc5 # engine=17340 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-03-06 05:25:52 # local_time=2014-03-06 06:25:52 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 85 77 3215737 3276181 0 0 # compatibility_mode=5893 16776573 100 94 100633 145756602 0 0 # scanned=433220 # found=2 # cleaned=0 # scan_time=16417 sh=A1E794F765B151EF4954C000AF34C4D1C5F06D9C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Program Files\Rosetta Stone\ROSETTA_AIO_2.iso" sh=A1E794F765B151EF4954C000AF34C4D1C5F06D9C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Program Files\Rosetta Stone\rosetta stone\ROSETTA_AIO_2.iso" Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Secunia PSI (3.0.0.3001) Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.70 Flash Player out of Date! Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox (27.0.1) ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! IObit IObit Malware Fighter IMFsrv.exe IObit IObit Malware Fighter Promote.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2014 02 Ran by Sabine (administrator) on A-VAIO on 06-03-2014 18:34:22 Running from C:\Users\Sabine\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (ArcSoft, Inc.) c:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\Promote.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Mozilla Corporation) C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\komm\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe () C:\Users\Sabine\Desktop\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11895400 2011-11-14] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-11-14] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2011-06-22] (Synaptics Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PMBVolumeWatcher] - c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [651832 2011-08-24] (Sony Corporation) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-27] (AVAST Software) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1592640 2014-02-27] (IObit) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\.DEFAULT\...\Run: [Advanced SystemCare 6] - "C:\Program Files (x86)\anwend\Advanced SystemCare 6\ASCTray.exe" /AutoStart HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [AdobeBridge] - [X] HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [ISUSPM] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [205480 2007-08-30] (Macrovision Corporation) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKU\S-1-5-21-3901353943-2070415304-2330678088-1003\...\MountPoints2: {a8b55366-eeaa-11e1-84f2-30f9edf0e431} - E:\autorun.exe SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nl.search.yahoo.com/?type=198484&fr=spigot-yhp-ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = SearchScopes: HKCU - DefaultScope {47F46A14-4D18-4536-BB60-27797C7C90D3} URL = hxxp://nl.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} SearchScopes: HKCU - {47F46A14-4D18-4536-BB60-27797C7C90D3} URL = hxxp://nl.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {238F6F83-B8B4-11CF-8771-00A024541EE3} https://ras.alphabet.com/dana/download/icaweb-10.2.cab?url=/dana/term/winlaunchterm.cgi?op=DownloadCitrixCab DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ras.alphabet.com/dana-cached/sc/JuniperSetupClient.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.54.40.25 212.54.35.25 FireFox: ======== FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default FF SearchEngineOrder.1: Ask Search FF SearchEngineOrder.3: Bing FF Homepage: www.google.de FF Keyword.URL: hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @ABNAMRO/BECON,version=1.00 - C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll (ABN AMRO) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Extension: HDvid Codec V6.0 - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-03-04] FF Extension: Ads Removal - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\adsremoval@adsremoval.net [2014-03-06] FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\ascsurfingprotection@iobit.com [2014-02-25] FF Extension: Slick Savings - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\savingsslider@mybrowserbar.com [2014-02-25] FF Extension: Start Page - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-02-25] FF Extension: qualitink - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\firefox@qualitink.net.xpi [2013-10-05] FF Extension: GMX MailCheck - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\i84xvo7t.default\Extensions\toolbar@gmx.net.xpi [2013-03-21] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\komm\Mozilla Firefox\firefox.exe Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Ads Removal) - C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-03-01] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-07-05] (Atheros) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-27] (AVAST Software) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [111776 2011-08-25] (Atheros Communication Inc.) R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-01-24] (IObit) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit) S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation) S4 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-07-25] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-07-25] (Secunia) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation) R2 uCamMonitor; c:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation) S2 RoxLiveShare9; "C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X] ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-27] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-27] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-27] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-27] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-18] () R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) S3 e.dentifier2; C:\Windows\System32\DRIVERS\aabed2.sys [28672 2008-03-20] (Todos Data System AB) S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2013-03-05] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2014-03-01] (Intel Corporation) R4 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com) S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) R2 risdsnpe; C:\Windows\system32\drivers\risdsnxc64.sys [98816 2011-06-23] (REDC) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit) S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com) S3 HSPADataCardusbmdm; system32\DRIVERS\HSPADataCardusbmdm.sys [X] S3 HSPADataCardusbnmea; system32\DRIVERS\HSPADataCardusbnmea.sys [X] S3 HSPADataCardusbser; system32\DRIVERS\HSPADataCardusbser.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-06 18:29 - 2014-03-06 18:29 - 00987425 _____ () C:\Users\Sabine\Desktop\SecurityCheck.exe 2014-03-06 13:50 - 2014-03-06 13:50 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu(2).exe 2014-03-06 13:49 - 2014-03-06 13:49 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu(1).exe 2014-03-06 13:45 - 2014-03-06 13:45 - 00001177 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-03-05 16:01 - 2014-03-05 16:01 - 01037734 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT(1).exe 2014-03-05 14:18 - 2014-03-05 14:18 - 00000000 ____D () C:\Windows\ERUNT 2014-03-05 14:17 - 2014-03-05 14:18 - 01037734 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT.exe 2014-03-05 13:21 - 2014-03-05 13:21 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner(1).exe 2014-03-04 20:00 - 2014-03-04 20:00 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Skype 2014-03-04 13:46 - 2014-03-04 13:47 - 154654896 _____ ( ) C:\Users\Sabine\Downloads\HEMA_NL_Fotoservice.exe 2014-03-02 18:44 - 2014-03-02 18:44 - 00000000 ____D () C:\Users\Sabine\Desktop\FRST-OlderVersion 2014-03-01 20:13 - 2014-03-01 20:13 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2014-03-01 20:08 - 2014-03-01 20:08 - 01582904 _____ (ESET) C:\Users\Sabine\Downloads\eset_smart_security_live_installer_v7.exe 2014-03-01 19:48 - 2014-03-01 19:48 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-01 19:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-01 19:46 - 2014-03-06 18:34 - 00025851 _____ () C:\Users\Sabine\Desktop\FRST.txt 2014-03-01 19:43 - 2014-03-01 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-01 19:43 - 2014-03-01 19:43 - 00062139 _____ () C:\Users\Sabine\Downloads\Addition.txt 2014-03-01 19:42 - 2014-03-06 18:34 - 00000000 ____D () C:\FRST 2014-03-01 19:42 - 2014-03-02 18:44 - 02156544 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe 2014-03-01 19:39 - 2014-03-01 19:40 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(2).exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST.exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(1).exe 2014-03-01 19:27 - 2014-03-01 19:43 - 00058484 _____ () C:\Users\Sabine\Downloads\FRST.txt 2014-03-01 19:22 - 2014-03-05 16:05 - 00000000 ____D () C:\AdwCleaner 2014-03-01 19:22 - 2014-03-01 19:22 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner.exe 2014-03-01 19:04 - 2014-03-01 19:04 - 00000000 _____ () C:\asc_rdflag 2014-03-01 19:02 - 2014-03-01 19:02 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\TrojanHunter 2014-03-01 17:54 - 2014-03-01 17:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2014-03-01 17:53 - 2014-03-01 17:53 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-03-01 17:37 - 2014-03-01 17:37 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-03-01 17:36 - 2014-03-01 17:37 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-03-01 17:36 - 2014-03-01 17:36 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-03-01 17:31 - 2014-03-01 17:54 - 00000000 ____D () C:\DrvInstall 2014-03-01 17:29 - 2014-03-01 19:19 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5 2014-03-01 17:29 - 2014-03-01 17:29 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll 2014-03-01 17:25 - 2014-03-01 17:25 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan 2014-03-01 17:25 - 2014-03-01 17:25 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Google 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-02-26 19:32 - 2014-02-26 19:32 - 00000000 ____D () C:\Users\A\AppData\Local\Skype 2014-02-25 13:17 - 2014-02-25 13:17 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-02-19 17:14 - 2014-02-19 17:16 - 00000000 ____D () C:\Users\Sabine\Documents\My Kindle Content 2014-02-18 19:09 - 2014-02-27 19:38 - 00388289 _____ () C:\Users\A\AppData\Local\QC_140217.log 2014-02-17 12:59 - 2014-02-17 12:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-02-12 21:17 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-12 21:17 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-12 21:16 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-12 21:16 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-12 21:16 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-12 21:16 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-12 21:16 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-12 21:16 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-12 21:16 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-12 21:16 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-12 21:16 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-12 21:16 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-12 21:16 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-12 21:16 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-12 21:16 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-12 21:16 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-12 21:16 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-12 21:16 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-12 21:16 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-12 21:16 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-12 21:16 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-12 21:16 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-12 21:16 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-12 21:16 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-12 21:16 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-12 21:16 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-12 21:16 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-12 21:16 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-12 21:16 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-12 21:16 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-12 21:16 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-12 21:16 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-12 21:16 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-12 21:16 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-12 21:16 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-12 21:16 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-12 21:16 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-12 21:16 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-12 21:16 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-12 21:16 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-12 21:16 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-12 13:23 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-12 13:23 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-12 13:23 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 13:23 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-12 13:23 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-12 13:23 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-12 13:22 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-12 13:22 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-12 13:22 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-12 13:22 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-12 13:22 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-12 13:22 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-12 13:22 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-12 13:22 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-12 13:22 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-12 13:21 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-12 13:21 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-12 13:21 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-12 13:21 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-09 11:29 - 2014-02-09 11:29 - 00001047 _____ () C:\Users\Public\Desktop\MediaMonkey.lnk 2014-02-09 11:28 - 2014-02-09 11:28 - 15173224 _____ (Ventis Media Inc. ) C:\Users\A\Downloads\MediaMonkey_4.1.0.1692.exe ==================== One Month Modified Files and Folders ======= 2014-03-06 18:35 - 2014-03-01 19:46 - 00025851 _____ () C:\Users\Sabine\Desktop\FRST.txt 2014-03-06 18:34 - 2014-03-01 19:42 - 00000000 ____D () C:\FRST 2014-03-06 18:29 - 2014-03-06 18:29 - 00987425 _____ () C:\Users\Sabine\Desktop\SecurityCheck.exe 2014-03-06 18:03 - 2012-10-27 10:56 - 00000000 ____D () C:\Users\A\Outlook-Dateien 2014-03-06 18:03 - 2012-08-24 22:01 - 00000000 ____D () C:\Users\Sabine\Documents\Outlook-Dateien 2014-03-06 17:41 - 2014-01-24 13:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-06 16:50 - 2013-09-14 14:56 - 01204142 _____ () C:\Windows\WindowsUpdate.log 2014-03-06 13:50 - 2014-03-06 13:50 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu(2).exe 2014-03-06 13:50 - 2012-08-24 21:09 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Adobe 2014-03-06 13:49 - 2014-03-06 13:49 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu(1).exe 2014-03-06 13:47 - 2009-07-14 05:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-06 13:47 - 2009-07-14 05:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-06 13:45 - 2014-03-06 13:45 - 00001177 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-03-06 13:44 - 2012-02-10 09:50 - 00769386 _____ () C:\Windows\system32\perfh007.dat 2014-03-06 13:44 - 2012-02-10 09:50 - 00176084 _____ () C:\Windows\system32\perfc007.dat 2014-03-06 13:44 - 2009-07-14 06:13 - 01816098 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-06 13:43 - 2013-05-29 19:58 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-03-06 13:41 - 2012-09-10 19:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-03-06 13:40 - 2013-12-14 17:00 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-03-06 13:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-05 16:05 - 2014-03-01 19:22 - 00000000 ____D () C:\AdwCleaner 2014-03-05 16:01 - 2014-03-05 16:01 - 01037734 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT(1).exe 2014-03-05 14:18 - 2014-03-05 14:18 - 00000000 ____D () C:\Windows\ERUNT 2014-03-05 14:18 - 2014-03-05 14:17 - 01037734 _____ (Thisisu) C:\Users\Sabine\Downloads\JRT.exe 2014-03-05 13:21 - 2014-03-05 13:21 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner(1).exe 2014-03-04 22:11 - 2013-10-21 13:24 - 00000000 ____D () C:\Users\Sabine\AppData\Local\CrashDumps 2014-03-04 20:30 - 2012-08-31 17:09 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Skype 2014-03-04 20:20 - 2013-06-17 19:43 - 00017779 _____ () C:\Users\Sabine\AppData\Local\LayoutPanels.xml 2014-03-04 20:20 - 2013-06-17 19:43 - 00012577 _____ () C:\Users\Sabine\AppData\Local\Layout_Card.xml 2014-03-04 20:20 - 2013-06-17 19:41 - 00025672 _____ () C:\Users\Sabine\AppData\Local\Layout.xml 2014-03-04 20:20 - 2012-11-13 20:31 - 17367040 _____ () C:\Users\Sabine\AppData\Local\QC_log.LDF 2014-03-04 20:20 - 2012-11-13 20:31 - 07995392 _____ () C:\Users\Sabine\AppData\Local\QC.mdf 2014-03-04 20:20 - 2012-11-13 20:31 - 00003773 _____ () C:\Users\Sabine\AppData\Local\QC.ini 2014-03-04 20:03 - 2013-06-21 20:09 - 00000679 _____ () C:\Users\Sabine\Documents\ex.csv 2014-03-04 20:03 - 2012-11-13 20:30 - 00073832 _____ () C:\Users\Sabine\AppData\Local\QC.log 2014-03-04 20:01 - 2012-11-13 20:31 - 00020128 _____ () C:\Users\Sabine\AppData\Local\LayoutPanels_Default.xml 2014-03-04 20:00 - 2014-03-04 20:00 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Skype 2014-03-04 13:47 - 2014-03-04 13:46 - 154654896 _____ ( ) C:\Users\Sabine\Downloads\HEMA_NL_Fotoservice.exe 2014-03-02 18:53 - 2012-09-10 19:17 - 00000000 ____D () C:\Users\Sabine\Desktop\util 2014-03-02 18:44 - 2014-03-02 18:44 - 00000000 ____D () C:\Users\Sabine\Desktop\FRST-OlderVersion 2014-03-02 18:44 - 2014-03-01 19:42 - 02156544 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe 2014-03-01 20:13 - 2014-03-01 20:13 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2014-03-01 20:08 - 2014-03-01 20:08 - 01582904 _____ (ESET) C:\Users\Sabine\Downloads\eset_smart_security_live_installer_v7.exe 2014-03-01 19:48 - 2014-03-01 19:48 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-01 19:48 - 2014-03-01 19:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-01 19:43 - 2014-03-01 19:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sabine\Downloads\mbam-setup-1.75.0.1300.exe 2014-03-01 19:43 - 2014-03-01 19:43 - 00062139 _____ () C:\Users\Sabine\Downloads\Addition.txt 2014-03-01 19:43 - 2014-03-01 19:27 - 00058484 _____ () C:\Users\Sabine\Downloads\FRST.txt 2014-03-01 19:40 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(2).exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST.exe 2014-03-01 19:39 - 2014-03-01 19:39 - 01144320 _____ (Farbar) C:\Users\Sabine\Downloads\FRST(1).exe 2014-03-01 19:22 - 2014-03-01 19:22 - 01244192 _____ () C:\Users\Sabine\Downloads\adwcleaner.exe 2014-03-01 19:19 - 2014-03-01 17:29 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5 2014-03-01 19:07 - 2012-11-08 20:36 - 00000000 ____D () C:\ProgramData\IObit 2014-03-01 19:05 - 2013-12-16 06:56 - 105988096 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak 2014-03-01 19:04 - 2014-03-01 19:04 - 00000000 _____ () C:\asc_rdflag 2014-03-01 19:04 - 2013-12-16 06:56 - 00925696 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak 2014-03-01 19:04 - 2013-12-16 06:56 - 00098304 _____ () C:\Windows\system32\config\SAM.iodefrag.bak 2014-03-01 19:04 - 2013-12-16 06:56 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak 2014-03-01 19:04 - 2012-08-24 21:09 - 00000000 ____D () C:\Users\Sabine 2014-03-01 19:04 - 2012-08-24 20:02 - 00000000 ____D () C:\Users\A 2014-03-01 19:02 - 2014-03-01 19:02 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\TrojanHunter 2014-03-01 17:54 - 2014-03-01 17:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2014-03-01 17:54 - 2014-03-01 17:31 - 00000000 ____D () C:\DrvInstall 2014-03-01 17:53 - 2014-03-01 17:53 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-03-01 17:51 - 2014-03-01 17:51 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-03-01 17:51 - 2011-06-27 08:47 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2014-03-01 17:50 - 2012-02-10 10:14 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-01 17:38 - 2012-02-10 10:13 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-03-01 17:37 - 2014-03-01 17:37 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:37 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-03-01 17:37 - 2014-03-01 17:36 - 00023754 _____ () C:\Windows\system32\nvinfo.pb 2014-03-01 17:37 - 2013-10-14 14:24 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-03-01 17:36 - 2014-03-01 17:36 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-03-01 17:36 - 2012-02-10 10:13 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-03-01 17:36 - 2012-02-10 10:13 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-03-01 17:35 - 2014-03-01 17:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-03-01 17:35 - 2012-02-10 10:13 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-03-01 17:35 - 2012-02-10 10:13 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-03-01 17:29 - 2014-03-01 17:29 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll 2014-03-01 17:25 - 2014-03-01 17:25 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan 2014-03-01 17:25 - 2014-03-01 17:25 - 00000000 ____D () C:\Users\Sabine\AppData\Local\Google 2014-03-01 17:25 - 2013-02-08 20:05 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-03-01 13:48 - 2012-09-02 14:01 - 00000000 ____D () C:\Users\A\Documents\01 neue Dateien zum Aussortieren 2014-03-01 12:22 - 2013-01-02 19:56 - 00000000 ____D () C:\Users\A\Documents\Outlook-Dateien 2014-03-01 12:22 - 2012-09-02 14:33 - 00000000 ____D () C:\Users\A\Documents\80 BMW Büro 2014-03-01 12:21 - 2012-12-28 13:48 - 00000000 ____D () C:\Users\A\Documents\90 DANIEL 2014-03-01 12:21 - 2012-10-21 15:51 - 00000000 ____D () C:\Users\A\Documents\18 Wohnung in WB 2014-03-01 12:21 - 2012-09-02 14:19 - 00000000 ____D () C:\Users\A\Documents\11 Bank 2014-03-01 11:36 - 2013-12-16 06:56 - 43868160 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak 2014-02-28 21:38 - 2013-11-28 20:22 - 00000000 ____D () C:\Users\A\AppData\Roaming\MediaMonkey 2014-02-28 19:29 - 2013-06-18 20:51 - 00017786 _____ () C:\Users\A\AppData\Local\LayoutPanels.xml 2014-02-28 19:29 - 2013-06-18 20:51 - 00012577 _____ () C:\Users\A\AppData\Local\Layout_Card.xml 2014-02-28 19:29 - 2013-06-18 19:51 - 00021628 _____ () C:\Users\A\AppData\Local\Layout.xml 2014-02-28 19:29 - 2012-09-14 21:32 - 17367040 _____ () C:\Users\A\AppData\Local\QC_log.LDF 2014-02-28 19:29 - 2012-09-14 21:32 - 07995392 _____ () C:\Users\A\AppData\Local\QC.mdf 2014-02-28 19:29 - 2012-09-14 21:32 - 00003748 _____ () C:\Users\A\AppData\Local\QC.ini 2014-02-28 19:27 - 2012-09-14 21:32 - 00395621 _____ () C:\Users\A\AppData\Local\QC.log 2014-02-28 19:25 - 2012-09-14 21:32 - 00020128 _____ () C:\Users\A\AppData\Local\LayoutPanels_Default.xml 2014-02-28 19:04 - 2012-08-24 20:10 - 00000000 ____D () C:\Users\A\AppData\Local\Adobe 2014-02-27 19:38 - 2014-02-18 19:09 - 00388289 _____ () C:\Users\A\AppData\Local\QC_140217.log 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-02-27 13:24 - 2014-02-27 13:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-02-26 21:24 - 2012-10-20 20:55 - 00000000 ____D () C:\Users\A\AppData\Roaming\Skype 2014-02-26 21:18 - 2012-08-26 14:20 - 00000000 ___RD () C:\Users\A\Desktop\Util 2014-02-26 19:32 - 2014-02-26 19:32 - 00000000 ____D () C:\Users\A\AppData\Local\Skype 2014-02-26 19:32 - 2013-04-09 14:50 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-26 19:32 - 2012-02-10 11:42 - 00000000 ____D () C:\ProgramData\Skype 2014-02-25 13:17 - 2014-02-25 13:17 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-02-25 13:16 - 2014-01-11 14:47 - 00002852 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Sabine 2014-02-25 13:16 - 2013-11-01 21:09 - 00003096 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor 2014-02-24 20:13 - 2012-11-06 21:23 - 00000000 ____D () C:\Users\Sabine\Documents\00 neue Dateien Aussortieren 2014-02-24 14:08 - 2013-04-01 16:38 - 00002216 ____H () C:\Users\Sabine\Documents\Default.rdp 2014-02-23 21:00 - 2013-12-23 21:15 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\MediaMonkey 2014-02-21 18:41 - 2014-01-24 13:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-21 18:41 - 2012-09-02 09:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-21 18:41 - 2012-02-10 10:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-21 18:32 - 2012-11-04 19:32 - 00000000 ____D () C:\Users\A\Documents\50 Ziggo 2014-02-19 17:16 - 2014-02-19 17:14 - 00000000 ____D () C:\Users\Sabine\Documents\My Kindle Content 2014-02-19 13:13 - 2012-09-02 14:04 - 00000000 ____D () C:\Users\A\Documents\10 abgeschlossen 2014-02-17 19:49 - 2013-07-18 20:31 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 19:46 - 2012-08-25 11:15 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-17 12:59 - 2014-02-17 12:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-02-16 14:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-15 18:35 - 2012-08-25 12:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-13 18:34 - 2014-01-30 19:58 - 00162800 _____ () C:\Users\A\AppData\Local\QC_140129.log 2014-02-12 21:24 - 2012-08-24 21:43 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-12 21:19 - 2011-02-11 00:03 - 01790378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 21:17 - 2009-07-14 03:34 - 00000510 _____ () C:\Windows\win.ini 2014-02-10 19:28 - 2014-01-31 19:29 - 00110647 _____ () C:\Users\Sabine\AppData\Local\QC_140128.log 2014-02-09 15:48 - 2013-11-27 22:39 - 00000000 ____D () C:\Users\A\AppData\Roaming\vlc 2014-02-09 11:29 - 2014-02-09 11:29 - 00001047 _____ () C:\Users\Public\Desktop\MediaMonkey.lnk 2014-02-09 11:29 - 2013-11-28 20:22 - 00000000 ____D () C:\Program Files (x86)\MediaMonkey 2014-02-09 11:28 - 2014-02-09 11:28 - 15173224 _____ (Ventis Media Inc. ) C:\Users\A\Downloads\MediaMonkey_4.1.0.1692.exe 2014-02-07 22:30 - 2014-01-06 19:46 - 00000000 ____D () C:\Users\A\AppData\Roaming\EurekaLog 2014-02-06 20:30 - 2013-08-07 10:33 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\vlc 2014-02-06 15:10 - 2013-11-12 17:42 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-02-06 15:10 - 2012-12-22 16:59 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\DVDVideoSoft 2014-02-06 13:16 - 2014-02-12 21:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-12 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-12 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-12 21:16 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-12 21:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-12 21:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-12 21:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-12 21:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-12 21:16 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-12 21:16 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-12 21:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-12 21:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-12 21:16 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-12 21:16 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-12 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-12 21:16 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-12 21:16 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-12 21:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-12 21:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-12 21:16 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-12 21:16 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-12 21:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-12 21:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-12 21:16 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-12 21:16 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-12 21:16 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-12 21:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-12 21:16 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-12 21:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-12 21:16 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-12 21:16 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-12 21:16 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-12 21:16 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-12 21:16 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-12 21:16 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-12 21:16 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-12 21:16 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-12 21:16 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-12 21:16 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.23964.dll Some content of TEMP: ==================== C:\Users\A\AppData\Local\Temp\sfamcc00001.dll C:\Users\A\AppData\Local\Temp\sfareca00001.dll C:\Users\Sabine\AppData\Local\Temp\sfamcc00001.dll C:\Users\Sabine\AppData\Local\Temp\sfareca00001.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-28 21:45 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Hallo Schrauber, vielen Dank für die große Mühe! Ich hab den Rechnen neut gestartet und leider hab ich noch immer das selbe Problem, aber wie es scheint nur in Firefox Explorer. Was kann ich noch tun? Danke für Deine Antwort. LG Sabine Ja im Internet Explorer habe ich das nicht. Macht es Sinn, Firefox zu deinstallieren und neu zu installieren? |
07.03.2014, 16:46 | #13 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster jup Revo Uninstaller - Download - Filepony damit Firefox komplett deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.03.2014, 17:15 | #14 |
| firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Lieben lieben Dank Schrauber, jetzt läuft alles wieder einwandfrei!! Werde Euch gerne weiterempfehlen! Ich bin so glücklich!!! |
14.03.2014, 12:16 | #15 |
/// the machine /// TB-Ausbilder | firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu firefox hat links in Texten - wenn ich was anklicke öffnen sich werbefenster |
blaue, firefox, grüner, hintergrund, hoffe, irgendetwas, klicke, kreis, links, schrift, texte, trojaner, unterstrichen, unterstrichene werbelinks, verschiedene, verschiedenen, websites, werbefenster, werbeseite, werbung, worte, öffnen |