Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 7, Rechner friert ein, ist dlprotect.exe schuld?

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Log-Analyse und Auswertung: Windows 7, Rechner friert ein, ist dlprotect.exe schuld?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 04.03.2014, 14:49   #1
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Hallo,

habe seit kurzem das Problem, dass der Rechner hin und wieder einfriert. Scanne mein System regelmäßig mit Avira (ist auch mein Echtzeitschutz/Scanner), hatte aber keinen Sucherfolg.

Heute habe ich in der Taskbar einen mir unbekannten Eintrag entdeckt, der sich auch nicht öffnen/deaktivieren oder entfernen läßt:

dlprotect.exe

Selbst wenn dieses Teil nicht der Grund für das Einfrieren sein sollte, wüsste ich doch gerne, was es ist und anstellt, bzw. wie ich es wieder los werde.

So, habe mir die "goldenen Regeln" des Boards angeschaut, die Programme heruntergeladen und die Logs erstellt:

1. FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 01
Ran by brooklinmon (administrator) on CROOKED on 04-03-2014 14:00:27
Running from C:\Users\brooklinmon\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\ProgramData\dlprotect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [350072 2012-03-09] ()
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-11-27] (Sony Corporation)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [SSD Tweaker] - C:\Program Files\SSD Tweaker\SSD Tweaker.exe -reboot
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM\...\Run: [Download Protect] - C:\ProgramData\dlprotect.exe [12800 2014-02-28] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-06] (Microsoft Corporation)
Startup: C:\Users\brooklinmon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_78521225.lnk
ShortcutTarget: _uninst_78521225.lnk -> C:\Users\brooklinmon\AppData\Local\Temp\_uninst_78521225.bat ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.gmx.net/br/ie10_startpage
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE0B822A4CD61CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {365945E8-D652-441A-A6A3-387EC2F8DB81} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {7499225C-FBD3-40EB-8C20-500F5FC83699} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {B465D695-BB2A-45E0-80AF-B0A94D75643C} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {D969FF7D-81F5-4044-B576-9339C8AD5D17} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default
FF Homepage: hxxp://go.gmx.net/tb/mff_startpage_homepage
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*'))%20%7B%20return%20'PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 - C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @torrentstream.net/tsplugin,version=2.0 - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\player\npts_plugin.dll (Innovative Digital Technologies)
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dastelefonbuch.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dateiendungen-endungende.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\head-fiorg.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\kinode.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\the-pirate-bay.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\urban-dictionary.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: British English Dictionary - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2013-06-05]
FF Extension: FoxyProxy Standard - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\foxyproxy@eric.h.jung [2014-02-04]
FF Extension: Forecastfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2013-06-05]
FF Extension: FireShot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-01-28]
FF Extension: Flagfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2013-12-16]
FF Extension: TV-Fox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: FoxyTunes - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2013-06-05]
FF Extension: FT DeepDark - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-22]
FF Extension: Clear Cache - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\clearcache@michel.de.almeida.xpi [2013-06-05]
FF Extension: Facebook Disconnect - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\facebook@disconnect.me.xpi [2013-06-05]
FF Extension: Ghostery - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-07-05]
FF Extension: Mein Preis - Amazon Preisverlauf - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QqA8RBLaxLGXxg@jetpack.xpi [2013-06-05]
FF Extension: ShareMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\sharemenot@franziroesner.com.xpi [2013-06-05]
FF Extension: Thumbnail Zoom Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\thumbnailZoom@dadler.github.com.xpi [2013-09-18]
FF Extension: GMX MailCheck - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\toolbar@gmx.net.xpi [2013-06-06]
FF Extension: TrackMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-06-05]
FF Extension: Facebook Phishing Protector - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2013-06-05]
FF Extension: Copy Plain Text - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{723AAF16-AF1F-4404-A5D7-0BFE39766605}.xpi [2013-06-05]
FF Extension: NoScript - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-27]
FF Extension: DownThemAll! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-06-05]
FF Extension: ResultsAlpha - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{f727685b-ed90-4adc-8eec-8234574a91e6}.xpi [2014-02-26]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org
FF Extension: TS Magic Player - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org [2013-06-25]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] ()
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51784 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41544 2013-09-04] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15944 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [186952 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] ()
S3 FLASHSYS; C:\Program Files\MSI\Live Update 4\LU4\FLASHSYS.sys [9216 2007-12-14] ()
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [63872 2011-02-10] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2011-02-10] (Renesas Electronics Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-01-19] ()
S3 PCAlertDriver; \??\C:\Program Files\MSI\PC Alert 4\NTGLM7X.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2099-09-22 02:30 - 2014-02-06 22:58 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2099-06-05 08:26 - 2013-06-05 08:32 - 00000000 ____D () C:\Windows\Panther
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:47 - 2014-03-04 13:41 - 01311946 _____ () C:\Windows\WindowsUpdate.log
2099-06-05 07:43 - 15013-06-05 08:04 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-04 14:00 - 2014-03-04 14:00 - 00020033 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 07:59 - 2014-03-04 08:01 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 07:47 - 2014-03-04 07:58 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:34 - 2014-03-04 07:39 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-28 23:17 - 2014-03-01 11:47 - 00000000 ____D () C:\Program Files\ResultsAlpha
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-24 00:32 - 2014-02-24 00:35 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-22 11:54 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:47 - 2014-02-22 00:49 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-20 10:58 - 2013-12-18 06:13 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:43 - 2014-02-18 00:45 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:43 - 2014-02-18 00:45 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:36 - 2014-02-18 02:08 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:24 - 2014-02-17 01:38 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 00:43 - 2014-02-16 01:26 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 12:42 - 2014-02-25 12:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 23:03 - 2014-02-22 00:11 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-14 21:52 - 2014-02-14 21:54 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:46 - 2014-02-14 21:51 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:12 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 14:09 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 14:09 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 14:09 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-12 14:08 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 14:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 01:00 - 2014-02-11 01:09 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 03:55 - 2014-02-08 04:22 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 19:24 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-06 19:18 - 2014-02-06 19:23 - 00040629 _____ () C:\LU4.log
2014-02-06 01:32 - 2014-02-07 00:45 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-05 17:06 - 2014-02-05 22:11 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 00:47 - 2014-02-04 01:19 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt
2014-02-02 02:29 - 2014-02-02 02:34 - 00009751 _____ () C:\Users\brooklinmon\Documents\alle gläser einer samstagnacht.odt

==================== One Month Modified Files and Folders =======

2099-06-05 08:23 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2099-06-05 08:23 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 08:04 - 15013-06-05 07:43 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:43 - 2009-07-14 08:49 - 00000000 ____D () C:\Windows\CSC
2099-06-05 07:43 - 2009-07-14 05:34 - 00001778 _____ () C:\Windows\DtcInstall.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-04 14:00 - 2014-03-04 14:00 - 00020033 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-04 14:00 - 2013-06-05 23:21 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\NetSpeedMonitor
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 13:58 - 2013-09-25 23:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-04 13:47 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-04 13:47 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-04 13:42 - 2013-06-05 08:26 - 01643200 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-04 13:41 - 15013-06-05 07:47 - 01311946 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 13:38 - 2013-09-25 23:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-04 13:38 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-04 13:38 - 2009-07-14 05:39 - 00068908 _____ () C:\Windows\setupact.log
2014-03-04 13:31 - 2013-06-06 03:29 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\uTorrent
2014-03-04 10:37 - 2013-06-05 11:34 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\vlc
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 08:01 - 2014-03-04 07:59 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 08:01 - 2013-06-05 09:31 - 00000000 ____D () C:\Users\brooklinmon
2014-03-04 07:58 - 2014-03-04 07:47 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:42 - 2014-01-19 17:49 - 00000000 ____D () C:\ProgramData\AllMyBooks
2014-03-04 07:39 - 2014-03-04 07:34 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-03-02 09:14 - 2013-06-06 00:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-03-01 11:47 - 2014-02-28 23:17 - 00000000 ____D () C:\Program Files\ResultsAlpha
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-27 21:15 - 2013-06-06 08:20 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\XnView
2014-02-25 12:24 - 2013-06-07 10:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-25 12:24 - 2013-06-07 10:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-25 12:21 - 2014-02-15 12:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 00:41 - 2013-06-26 10:24 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\MyPhoneExplorer
2014-02-24 22:06 - 2013-06-11 04:01 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Skype
2014-02-24 11:26 - 2013-06-06 00:16 - 00104398 _____ () C:\Windows\PFRO.log
2014-02-24 00:35 - 2014-02-24 00:32 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-24 00:09 - 2013-08-21 14:04 - 00002180 _____ () C:\Users\Public\Desktop\Free Audio Converter.lnk
2014-02-24 00:09 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-24 00:08 - 2013-12-26 15:53 - 33524456 _____ (DVDVideoSoft Ltd. ) C:\Users\brooklinmon\Downloads\FreeAudioConverter.exe
2014-02-24 00:08 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 00:08 - 2013-07-26 21:16 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\DVDVideoSoft
2014-02-22 11:54 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:49 - 2014-02-22 00:47 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-22 00:11 - 2014-02-14 23:03 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-20 10:51 - 2013-06-06 00:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:08 - 2014-02-18 00:36 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:45 - 2014-02-18 00:43 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:45 - 2014-02-18 00:43 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:38 - 2014-02-17 01:24 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 01:26 - 2014-02-16 00:43 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 15:44 - 2013-07-02 23:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-14 21:54 - 2014-02-14 21:52 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:51 - 2014-02-14 21:46 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-12 14:12 - 2013-07-11 11:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 14:11 - 2013-06-05 22:32 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 01:09 - 2014-02-11 01:00 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 04:22 - 2014-02-08 03:55 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-07 00:45 - 2014-02-06 01:32 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-06 23:02 - 2013-06-13 21:44 - 00000000 ____D () C:\Program Files\MSI
2014-02-06 23:00 - 2013-06-05 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 22:58 - 2289-09-22 02:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 22:57 - 2013-06-05 09:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-06 19:23 - 2014-02-06 19:18 - 00040629 _____ () C:\LU4.log
2014-02-06 19:23 - 2013-06-06 00:11 - 00000000 ____D () C:\Program Files\Realtek
2014-02-06 01:39 - 2013-08-19 00:04 - 00001020 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 22:11 - 2014-02-05 17:06 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 01:19 - 2014-02-04 00:47 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt
2014-02-02 02:34 - 2014-02-02 02:29 - 00009751 _____ () C:\Users\brooklinmon\Documents\alle gläser einer samstagnacht.odt

Files to move or delete:
====================
C:\Windows\System32\mctadmin.exe
C:\ProgramData\dlprotect.exe
C:\Users\brooklinmon\setup.exe


Some content of TEMP:
====================
C:\Users\brooklinmon\AppData\Local\Temp\abelssoft.setup.exe
C:\Users\brooklinmon\AppData\Local\Temp\avgnt.exe
C:\Users\brooklinmon\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\brooklinmon\AppData\Local\Temp\Quarantine.exe
C:\Users\brooklinmon\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 12:14

==================== End Of Log ============================
2. Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 01
Ran by brooklinmon at 2014-03-04 14:00:51
Running from C:\Users\brooklinmon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30260 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.2 (HKLM\...\{12A54F16-7F2E-4D42-BBCA-E0CC3CBF0457}) (Version: 5.2.1 - Adobe)
Alfa eBooks Manager 4 (HKLM\...\{89CA723D-1F92-4888-A326-1943579C8BFC}) (Version: 4.9.0 - Alfa.NetSoft)
Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.2.0.399 - Amazon Services LLC)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Canon Utilities Digital Photo Professional 3.10 (HKLM\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
CloudReading (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.1.47.1220 - Foxit Corporation)
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Digitale Bibliothek (HKLM\...\Digitale Bibliothek) (Version:  - )
Dr. Hardware 2013 13.6d (HKLM\...\Dr. Hardware 2013_is1) (Version:  - Peter A. Gebhard)
EaseUS Partition Master 9.3.0 (HKLM\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 6.1 (HKLM\...\EaseUS Todo Backup Free 6.1_is1) (Version: 6.1 - CHENGDU YIWO Tech Development Co., Ltd)
foobar2000 v1.3.1 (HKLM\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.2.1224 - Foxit Corporation)
Free Audio Converter version 5.0.33.213 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.33.213 - DVDVideoSoft Ltd.)
Free Disc Burner version 3.0.19.925 (HKLM\...\Free Disc Burner_is1) (Version: 3.0.19.925 - DVDVideoSoft Ltd.)
FreeCommander 2009.02b (HKLM\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski)
Freemake Video Converter Version 4.0.1 (HKLM\...\Freemake Video Converter_is1) (Version: 4.0.1 - Ellora Assets Corporation)
GMX MailCheck für Internet Explorer (HKLM\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.4.0.0 - 1&1 Mail & Media GmbH)
GMX MediaCenter 1.5.2192.0 (HKCU\...\GMX Application {sync-000021}) (Version: 1.5.2192.0 - 1&1 Mail & Media GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 3.2.4 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 3.2.4 - 1 und 1 Internet AG) Hidden
GMX Softwareaktualisierung (HKLM\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung CE (HKCU\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.1.0 - 1&1 Mail & Media GmbH)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
Hamster Free EbookConverter (HKLM\...\{441AC599-200D-4E04-B274-C6B7B50C281D}_is1) (Version: 1.0.0.13 - HamsterSoft)
Hightail Desktop App (HKLM\...\{74EE14D5-0E12-49C2-9C46-5C1F908BA0FC}) (Version: 2.4.7.1621 - Hightail)
Java Auto Updater (Version: 2.0.3.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216024FF}) (Version: 6.0.240 - Oracle)
KooBits 4.0 (HKLM\...\koobits.koobits4.com) (Version: 4.0.1.7 - UNKNOWN)
KooBits 4.0 (Version: 4.0.1 - UNKNOWN) Hidden
LightZone 4.0.0 (HKLM\...\3263-1164-2624-0047) (Version: 4.0.0 - LightZone Project)
Liveupdate4 (HKLM\...\Liveupdate4_is1) (Version:  - MSI, Inc.)
Logitech Unifying-Software 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech)
MartView (HKLM\...\MartView) (Version: 2.52 - MartView)
MartView (Version: 2.52 - MartView) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetSpeedMonitor 2.5.4.0 x86 (HKLM\...\{86501894-E722-4385-A792-B7C2F28FAE7B}) (Version: 2.5.4.0 - Florian Gilles)
NVIDIA Control Panel 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.15.11.9038 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)
Reader for PC (HKLM\...\{71FB3127-E6B2-4058-ACEE-99813554FAB6}) (Version: 2.2.00.11270 - Sony Corporation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7116 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
ResultsAlpha (HKLM\...\ResultsAlpha) (Version: 2014.02.26.045520 - ResultsAlpha)
RetroShare (HKLM\...\RetroShare) (Version:  - )
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.03.72.00(20.09.2013) - Samsung Electronics Co., Ltd.)
Simply Good Pictures 2 (HKLM\...\{DD2FEA6F-5AC2-46B2-0001-C2A0C077FD2C}) (Version: 2.0.13.115 - Engelmann Media GmbH)
Skype Click to Call (HKLM\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.0.14735.1561 - Microsoft Corporation)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
SlimDrivers (HKLM\...\{E1D00057-82F0-4EA1-91C2-270682EB9C98}) (Version: 2.2.30423 - SlimWare Utilities, Inc.)
SopCast 3.8.2 (HKLM\...\SopCast) (Version: 3.8.2 - www.sopcast.com)
SSD Fresh (HKLM\...\SSD Fresh_is1) (Version: 2014 - Abelssoft)
SSDlife Free (HKLM\...\{F371CE3B-8994-44E3-9518-92B22EE4A7FF}) (Version: 2.3.56 - BinarySense Inc.)
Torrent Stream 2.0 (HKCU\...\TorrentStream) (Version: 2.0 - Torrent Stream)
UBCD4Win 3.60 (HKLM\...\UBCD4Win_is1) (Version:  - UBCD4Win Team - Benjamin Burrows)
VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
World of Warplanes (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)
XnView 2.04 (HKLM\...\XnView_is1) (Version: 2.04 - Gougelet Pierre-e)

==================== Restore Points  =========================

17-02-2014 23:37:13 SSD Tweaker restore point
17-02-2014 23:41:58 Installed SSDlife Free
18-02-2014 01:05:07 SSD Tweaker restore point
18-02-2014 01:07:14 SSD Tweaker restore point
19-02-2014 09:11:13 Windows Update
20-02-2014 09:50:42 Installiert Renesas Electronics USB 3.0 Host Controller Driver
25-02-2014 14:52:57 Windows Update
28-02-2014 16:30:15 Windows Update
02-03-2014 08:13:05 Driver Booster : Realtek High Definition Audio
04-03-2014 06:24:04 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B975B81-1F49-47BD-978B-D5CD79FD41A3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {43DE88ED-CDDA-44E6-AE5F-75949ED4A29C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {6E18C6F4-BCDB-448D-880B-DD415B67D65A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {97B6E8F4-5055-422E-A367-4B920FAE2BA2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2006-12-09 12:54 - 2006-12-09 12:54 - 00022723 _____ () C:\Windows\System32\sugg1l3.dll
2013-06-05 10:41 - 2013-01-25 18:25 - 00397704 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00098888 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CodeLog.dll
2013-12-14 00:59 - 2013-11-14 14:59 - 00031304 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CheckTool.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00029768 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CompressFile.dll
2013-12-14 00:59 - 2008-11-25 17:18 - 01291264 _____ () C:\Program Files\EaseUS\Todo Backup\bin\libxml2.dll
2013-12-14 00:59 - 2004-10-05 03:08 - 00055808 _____ () C:\Program Files\EaseUS\Todo Backup\bin\zlib1.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00050248 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2013-12-14 00:59 - 2013-10-24 17:46 - 00106568 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ActivationOnline.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00249928 _____ () C:\Program Files\EaseUS\Todo Backup\bin\uexper.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00030280 _____ () C:\Program Files\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00293960 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExchBackupSize.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00578632 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExImage.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00468040 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00192072 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00068680 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00069192 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00022600 _____ () C:\Program Files\EaseUS\Todo Backup\bin\AccountManager.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00115784 _____ () C:\Program Files\EaseUS\Todo Backup\bin\NasOperator.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00192584 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EmailBrowser.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00135752 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CloudOperator.dll
2013-12-14 00:59 - 2013-10-22 17:31 - 00037960 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ActiveOnline.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00135240 _____ () C:\Program Files\EaseUS\Todo Backup\bin\VMConfig.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00096840 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TBFireWall.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00350072 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 09:58 - 2012-03-09 09:58 - 00056696 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-11-27 20:48 - 2013-11-27 20:48 - 00880640 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\fsk.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00040264 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00239944 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\Fskin.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00026952 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskinLocalize.dll
2013-11-26 11:34 - 2013-11-26 11:34 - 00798720 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00125256 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00016200 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskPower.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00024904 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskNetInterface.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00017224 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00015176 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00034632 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ticket.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00018760 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00092488 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookUsb.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00149832 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\readerAppHelper.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00178504 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\USBDetector.dll
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-15 12:42 - 2014-02-15 12:42 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
MSCONFIG\startupreg: EaseUs Tray => "C:\Program Files\EaseUS\Todo Backup\bin\TrayNotify.exe"
MSCONFIG\startupreg: EaseUs Watch => "C:\Program Files\EaseUS\Todo Backup\bin\EuWatch.exe"
MSCONFIG\startupreg: Hightail Sync Agent => "C:\Program Files\Hightail Desktop App\Hightail.exe"
MSCONFIG\startupreg: MailCheck IE Broker => "C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

==================== Faulty Device Manager Devices =============

Name: WAN Miniport (IKEv2)
Description: WAN Miniport (IKEv2)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RasAgileVpn
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2014 00:00:42 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/04/2014 11:36:46 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/02/2014 00:27:50 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/02/2014 09:13:04 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {e0d4d091-93a6-4b71-be3d-53a6cb0358ee}

Error: (03/01/2014 02:24:49 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/27/2014 02:45:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/25/2014 02:28:45 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (03/04/2014 01:38:12 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 13:37:33 on ‎04.‎03.‎2014 was unexpected.

Error: (03/04/2014 10:23:56 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.

Error: (03/04/2014 10:23:56 AM) (Source: nvstor32) (User: )
Description: Data error on device.



Device: \Device\RaidPort0

Model: M4-CT128M4SSD2

Firmware Version: 000F

Serial Number: 000000001217090992B0

Port: 1

Error: (03/04/2014 10:22:23 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.

Error: (03/04/2014 10:22:23 AM) (Source: nvstor32) (User: )
Description: Data error on device.



Device: \Device\RaidPort0

Model: M4-CT128M4SSD2

Firmware Version: 000F

Serial Number: 000000001217090992B0

Port: 1

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Software Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Windows Live ID Sign-in Assistant service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Skype Click to Call PNR Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Skype Click to Call Updater service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Display Driver Service service terminated unexpectedly.  It has done this 1 time(s).


Microsoft Office Sessions:
=========================
Error: (03/04/2014 00:00:42 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/04/2014 11:36:46 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/02/2014 00:27:50 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/02/2014 09:13:04 AM) (Source: VSS)(User: )
Description: 0x80070005, Access is denied.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {e0d4d091-93a6-4b71-be3d-53a6cb0358ee}

Error: (03/01/2014 02:24:49 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/27/2014 02:45:26 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/25/2014 02:28:45 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 2815.24 MB
Available physical RAM: 1495.42 MB
Total Pagefile: 5628.77 MB
Available Pagefile: 4116.12 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.72 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:27.57 GB) NTFS
Drive d: (Volume) (Fixed) (Total:458.01 GB) (Free:105.59 GB) NTFS
Drive f: (backup) (Fixed) (Total:185.21 GB) (Free:5.87 GB) NTFS
Drive g: (seagate 3tb no 1) (Fixed) (Total:1228.67 GB) (Free:90.56 GB) NTFS
Drive h: (seagate 3tb no 2) (Fixed) (Total:1245.73 GB) (Free:921.77 GB) NTFS
Drive z: (DB31) (CDROM) (Total:0.59 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 5BAD3F0E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2795 GB) (Disk ID: 829E62A5)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 466 GB) (Disk ID: B986B986)

Partition: GPT Partition Type.

==================== End Of Log ============================
3. GMER

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-04 14:16:13
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000068 M4-CT128 rev.000F 119,24GB
Running: Gmer-19357.exe; Driver: C:\Users\BROOKL~1\AppData\Local\Temp\uwldqpog.sys


---- System - GMER 2.1 ----

SSDT            8D4E0696                                  ZwCreateSection
SSDT            8D4E06A0                                  ZwRequestWaitReplyPort
SSDT            8D4E069B                                  ZwSetContextThread
SSDT            8D4E06A5                                  ZwSetSecurityObject
SSDT            8D4E06AA                                  ZwSystemDebugControl
SSDT            8D4E0637                                  ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text           ntkrnlpa.exe!ZwRollbackEnlistment + 142D  8327FA15 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2    832B9212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntkrnlpa.exe!KeRemoveQueueEx + 11F7       832C058C 4 Bytes  [96, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1553       832C08E8 4 Bytes  [A0, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1597       832C092C 4 Bytes  [9B, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1613       832C09A8 4 Bytes  [A5, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1667       832C09FC 4 Bytes  [AA, 06, 4E, 8D]
.text           ...                                       
?               system32\DRIVERS\78521225.sys             The system cannot find the path specified. !

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume7    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume7    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume8    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume8    eubakup.sys

---- EOF - GMER 2.1 ----
So, das wars erstmal von mir, bin hoffnungsvoll gespannt - und bereits vorsorglich dankbar - für die Zeit und Mühe, die sich (hoffentlich...) jemand nimmt/macht, um mir zu helfen!

Liebe Grüße,
Rainer

Alt 04.03.2014, 15:02   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________

__________________
Alt 04.03.2014, 15:50   #3
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


hi,

und danke für die schnelle antwort!

folgend das neue logfile:

Code:
ATTFilter
ComboFix 14-03-04.01 - brooklinmon 04.03.2014  15:34:31.1.3 - x86
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1033.18.2815.1245 [GMT 1:00]
ausgeführt von:: c:\users\brooklinmon\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\dlprotect.exe
c:\windows\system32\SET17A.tmp
c:\windows\system32\SET3A1.tmp
c:\windows\system32\SETB674.tmp
c:\windows\system32\SETC5CE.tmp
c:\windows\unin0407.exe
H:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-04 bis 2014-03-04  ))))))))))))))))))))))))))))))
.
.
2289-09-22 01:30 . 2014-02-06 21:58	100896	----a-w-	c:\windows\system32\RTNUninst32.dll
2288-02-06 23:59 . 2288-02-06 23:59	938752	----a-w-	c:\windows\system32\slcnt32.dll
2288-02-06 23:59 . 2288-02-06 23:59	823040	----a-w-	c:\windows\system32\sl3apo32.dll
2288-02-06 23:59 . 2288-02-06 23:59	798520	----a-w-	c:\windows\system32\RTKSMSettingsIPC.dll
2288-02-06 23:59 . 2288-02-06 23:59	761088	----a-w-	c:\windows\system32\MaxxVoiceAPO20.dll
2288-02-06 23:59 . 2288-02-06 23:59	509184	----a-w-	c:\windows\system32\MaxxAudioAPO30.dll
2288-02-06 23:59 . 2288-02-06 23:59	352016	----a-w-	c:\windows\system32\R4EED32A.dll
2288-02-06 23:59 . 2288-02-06 23:59	2395680	----a-w-	c:\windows\system32\FMAPO.dll
2288-02-06 23:59 . 2288-02-06 23:59	218368	----a-w-	c:\windows\system32\slprp32.dll
2288-02-06 23:59 . 2288-02-06 23:59	106768	----a-w-	c:\windows\system32\R4EEL32A.dll
2287-01-18 17:15 . 2287-01-18 17:15	91920	----a-w-	c:\windows\system32\R4EEA32A.dll
2287-01-18 17:15 . 2287-01-18 17:15	873728	----a-w-	c:\windows\system32\MaxxAudioAPO40.dll
2287-01-18 17:15 . 2287-01-18 17:15	852016	----a-w-	c:\windows\system32\MISS_APO.dll
2287-01-18 17:15 . 2287-01-18 17:15	7162128	----a-w-	c:\windows\system32\R4EEP32A.dll
2287-01-18 17:15 . 2287-01-18 17:15	62224	----a-w-	c:\windows\system32\R4EEG32A.dll
2287-01-18 17:15 . 2287-01-18 17:15	604928	----a-w-	c:\windows\system32\sltech32.dll
2287-01-18 17:15 . 2287-01-18 17:15	509184	----a-w-	c:\windows\system32\MaxxVolumeSDAPO.dll
2287-01-18 17:15 . 2287-01-18 17:15	502584	----a-w-	c:\windows\system32\audioLibVc.dll
2287-01-18 17:15 . 2287-01-18 17:15	4222104	----a-w-	c:\windows\system32\RTKSMlfx.dll
2287-01-18 17:15 . 2287-01-18 17:15	188696	----a-w-	c:\windows\system32\AcpiServiceVnA.dll
2014-03-04 14:39 . 2014-03-04 14:40	--------	d-----w-	c:\users\brooklinmon\AppData\Local\temp
2014-03-04 14:39 . 2014-03-04 14:39	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-03-04 14:39 . 2014-03-04 14:39	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-03-04 13:00 . 2014-03-04 13:01	--------	d-----w-	C:\FRST
2014-03-04 07:02 . 2014-03-04 07:02	--------	d-----w-	c:\programdata\Kaspersky Lab
2014-03-04 06:47 . 2014-03-04 06:58	--------	d-----w-	c:\program files\stinger
2014-03-04 06:34 . 2014-03-04 06:39	--------	d-----w-	C:\AdwCleaner
2014-03-04 06:24 . 2014-02-17 00:32	7947048	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{3BF4CD94-B725-4690-A1DC-C67A3F7C5D3F}\mpengine.dll
2014-03-02 14:46 . 2014-03-02 14:46	--------	d-----w-	c:\users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 14:46 . 2014-03-02 14:46	--------	d-----w-	c:\program files\GMX SMS-MMS-Manager
2014-03-02 08:14 . 2014-03-02 08:14	696013	----a-w-	c:\windows\system32\drivers\RTAIODAT.DAT
2014-03-02 08:14 . 2014-03-02 08:14	5801652	----a-w-	c:\windows\system32\drivers\rtvienna.dat
2014-03-02 08:14 . 2014-03-02 08:14	43342848	----a-w-	c:\windows\system32\RCoRes.dat
2014-03-02 08:14 . 2014-03-02 08:14	2947160	----a-w-	c:\windows\system32\drivers\RTKVHDA.sys
2014-03-02 08:14 . 2014-03-02 08:14	2329816	----a-w-	c:\windows\system32\RtkAPO.dll
2014-03-02 08:14 . 2014-03-02 08:14	1892056	----a-w-	c:\windows\system32\RTSndMgr.cpl
2014-03-02 08:14 . 2014-03-02 08:14	125144	----a-w-	c:\windows\system32\RtkCoInstII.dll
2014-02-28 22:17 . 2014-03-01 10:47	--------	d-----w-	c:\program files\ResultsAlpha
2014-02-23 23:32 . 2014-02-23 23:35	--------	d-----w-	c:\users\brooklinmon\AppData\Roaming\foobar2000
2014-02-23 23:32 . 2014-02-23 23:32	--------	d-----w-	c:\program files\foobar2000
2014-02-20 09:58 . 2013-12-18 05:13	231584	------w-	c:\windows\system32\MpSigStub.exe
2014-02-20 09:50 . 2014-02-20 09:50	--------	d-----w-	c:\program files\Renesas Electronics
2014-02-20 09:50 . 2014-02-20 09:50	--------	d-----w-	c:\programdata\Downloaded Installations
2014-02-18 00:50 . 2014-02-18 00:50	488960	--sha-w-	C:\EUMONBMP.SYS
2014-02-17 23:43 . 2014-02-17 23:43	--------	d-----w-	c:\users\brooklinmon\AppData\Local\Abelssoft
2014-02-17 23:43 . 2014-02-17 23:45	--------	d-----w-	c:\program files\SSD Fresh
2014-02-17 23:42 . 2014-02-17 23:42	--------	d-----w-	c:\programdata\Binarysense
2014-02-17 23:42 . 2014-02-17 23:42	--------	d-----w-	c:\program files\BinarySense
2014-02-17 23:36 . 2014-02-18 01:08	--------	d-----w-	c:\program files\SSD Tweaker
2014-02-14 20:52 . 2014-02-14 20:54	--------	d-----w-	c:\programdata\ctyajht
2014-02-14 20:46 . 2014-02-14 20:51	--------	d-----w-	c:\programdata\oopaf
2014-02-12 13:12 . 2013-12-21 07:56	523776	----a-w-	c:\windows\system32\vbscript.dll
2014-02-12 13:08 . 2014-02-01 07:58	817664	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-02-12 13:08 . 2014-02-01 08:12	770736	----a-w-	c:\program files\Internet Explorer\iexplore.exe
2014-02-12 13:08 . 2014-02-01 07:58	1767936	----a-w-	c:\windows\system32\wininet.dll
2014-02-12 13:08 . 2013-12-06 02:02	2048	----a-w-	c:\windows\system32\msxml3r.dll
2014-02-12 13:08 . 2013-12-06 02:02	1237504	----a-w-	c:\windows\system32\msxml3.dll
2014-02-12 13:08 . 2013-12-24 23:09	1987584	----a-w-	c:\windows\system32\d3d10warp.dll
2014-02-12 13:08 . 2013-11-26 08:16	3419136	----a-w-	c:\windows\system32\d2d1.dll
2014-02-06 21:58 . 2014-02-06 21:58	76872	----a-w-	c:\windows\system32\RtNicProp32.dll
2014-02-06 21:58 . 2014-02-06 21:58	683736	----a-w-	c:\windows\system32\drivers\Rt86win7.sys
2014-02-06 18:24 . 1998-10-02 18:00	327168	----a-w-	c:\windows\IsUninst.exe
2014-02-05 16:06 . 2014-02-05 21:11	--------	d-----w-	c:\program files\MOBILedit! PhoneCopier
15013-06-05 07:26 . 2013-06-05 07:32	--------	d-----w-	c:\windows\Panther
15013-06-05 07:17 . 15013-06-05 07:17	--------	d-----w-	C:\Windows.old
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-25 11:24 . 2013-06-07 09:38	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-25 11:24 . 2013-06-07 09:38	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-01-19 20:16 . 2013-06-05 22:52	13464	----a-w-	c:\windows\system32\drivers\SWDUMon.sys
2014-01-18 22:37 . 2014-01-18 22:37	472808	----a-w-	c:\windows\system32\deployJava1.dll
2013-12-12 10:18 . 2013-06-05 09:43	69240	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-12-12 10:18 . 2013-06-05 09:41	90400	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-12-12 10:18 . 2013-06-05 09:41	135648	----a-w-	c:\windows\system32\drivers\avipbb.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00001YSISyncComplete]
@="{89B5F9CC-C4A2-462C-BD27-29CEAC972135}"
[HKEY_CLASSES_ROOT\CLSID\{89B5F9CC-C4A2-462C-BD27-29CEAC972135}]
2013-10-28 10:58	2844728	----a-w-	c:\program files\Hightail Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00002YSISyncActive]
@="{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}"
[HKEY_CLASSES_ROOT\CLSID\{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}]
2013-10-28 10:58	2844728	----a-w-	c:\program files\Hightail Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00003YSISyncError]
@="{306A9CDE-AC70-453A-8008-B5F9962B8F88}"
[HKEY_CLASSES_ROOT\CLSID\{306A9CDE-AC70-453A-8008-B5F9962B8F88}]
2013-10-28 10:58	2844728	----a-w-	c:\program files\Hightail Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00004YSILocalOnly]
@="{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}"
[HKEY_CLASSES_ROOT\CLSID\{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}]
2013-10-28 10:58	2844728	----a-w-	c:\program files\Hightail Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-02-20 689744]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-03-02 12017368]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1425208]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-03-09 350072]
"Reader Application Helper"="c:\program files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2013-11-27 899400]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-06-06 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray]
2013-03-29 16:07	2081792	----a-w-	c:\program files\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUs Tray]
2013-09-04 10:34	1372232	----a-w-	c:\program files\EaseUS\Todo Backup\bin\TrayNotify.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUs Watch]
2013-09-04 10:33	70728	----a-w-	c:\program files\EaseUS\Todo Backup\bin\EuWatch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hightail Sync Agent]
2013-10-28 10:58	7040056	----a-w-	c:\program files\Hightail Desktop App\Hightail.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MailCheck IE Broker]
2013-10-16 22:07	1728064	----a-w-	c:\program files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-10-29 13:49	249064	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-09-05 171680]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2013-03-07 14920]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2013-03-07 9160]
R3 FLASHSYS;FLASHSYS;c:\program files\MSI\Live Update 4\LU4\FLASHSYS.sys [2007-12-14 9216]
R3 PCAlertDriver;PCAlertDriver;c:\program files\MSI\PC Alert 4\NTGLM7X.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [2014-01-19 13464]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 EUBAKUP;EUBAKUP;c:\windows\system32\drivers\eubakup.sys [2013-09-04 51784]
S0 EUBKMON;EUBKMON;c:\windows\system32\drivers\EUBKMON.sys [2013-09-04 41544]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-12 37352]
S1 EUDSKACS;EUDSKACS;c:\windows\system32\drivers\eudskacs.sys [2013-09-04 15944]
S1 EUFDDISK;EUFDDISK;c:\windows\system32\drivers\EuFdDisk.sys [2013-09-04 186952]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-02-20 440400]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-01-03 1363616]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-01-03 1748640]
S2 drhard;drhard; [x]
S2 EaseUS Agent;EaseUS Agent Service;c:\program files\EaseUS\Todo Backup\bin\Agent.exe [2013-10-11 69192]
S2 Guard Agent;Guard Agent Service;c:\program files\EaseUS\Todo Backup\bin\GuardAgent.exe [2013-09-04 23624]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2013-04-10 5120]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 63872]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 141952]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2014-02-06 683736]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - 78521225
*Deregistered* - uwldqpog
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-25 22:29]
.
2014-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-25 22:29]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://go.gmx.net/br/ie10_startpage
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 192.168.1.1
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files\GMX MailCheck\IE\GMX_MailCheck.dll
FF - ProfilePath - c:\users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\
FF - prefs.js: browser.startup.homepage - hxxp://go.gmx.net/tb/mff_startpage_homepage
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SSD Tweaker - c:\program files\SSD Tweaker\SSD Tweaker.exe
HKLM-Run-Download Protect - c:\programdata\dlprotect.exe
c:\users\brooklinmon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_78521225.lnk - c:\users\brooklinmon\AppData\Local\Temp\_uninst_78521225.bat
AddRemove-Digitale Bibliothek - c:\windows\unin0407.exe
AddRemove-VIS - c:\users\brooklinmon\AppData\Roaming\Windows Net Data\uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-03-04  15:41:47
ComboFix-quarantined-files.txt  2014-03-04 14:41
.
Vor Suchlauf: 29.557.649.408 bytes free
Nach Suchlauf: 32.872.845.312 bytes free
.
- - End Of File - - 176A012A23365A786811E8A37E6BE40F
A36C5E4F47E84449FF07ED3517B43A31
__________________
Alt 05.03.2014, 14:30   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.03.2014, 15:44   #5
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


okay.... hier die gewünschten logfiles:

1. Malwarebytes

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.05.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16798
brooklinmon :: CROOKED [Administrator]

05.03.2014 15:07:38
mbam-log-2014-03-05 (15-07-38).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 239347
Laufzeit: 5 Minute(n), 3 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 5
HKCR\TypeLib\{F631E34D-23D3-4ED2-8942-631B8AAF9EA4} (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{B01A1DA4-813F-44BD-B544-77E5DA7EB5A8} (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ResultsAlpha (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\ResultsAlpha (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\ResultsAlpha (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 3
C:\Program Files\RESULTSALPHA (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\plugins (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 22
C:\Users\brooklinmon\Downloads\bs_Jeboorker.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\brooklinmon\Downloads\W7_L2.2.11.9_2013_www.RunPatch.com.rar (Hacktool.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\brooklinmon\Downloads\Windows Loader.exe (Hacktool.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\brooklinmon\Downloads\FreemakeVideoConverter_4.0.1.7.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\brooklinmon\Downloads\FreeDiscBurner.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\brooklinmon\Downloads\SoftonicDownloader_fuer_all-my-books.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\RESULTSALPHA.ICO (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\0 (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\7za.exe (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\ResultsAlphaBHO.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\ResultsAlphaUninstall.exe (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\updateResultsAlpha.exe (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\updateResultsAlpha.InstallState (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\ResultsAlpha.BrowserFilter.Helper.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\ResultsAlpha.BrowserFilter.Helper.dll.old.ec3d3ed6-ecca-4b27-9822-7512f6cdc6f2 (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\ResultsAlphaBrowserFilter.exe (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\sqlite3.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\utilResultsAlpha.exe (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\utilResultsAlpha.InstallState (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\plugins\ResultsAlpha.BrowserFilterG.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\plugins\ResultsAlpha.FFUpdate.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\RESULTSALPHA\bin\plugins\ResultsAlpha.IEUpdate.dll (PUP.Optional.ResultsAlpha.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
2. ADWCleaner

Code:
ATTFilter
# AdwCleaner v3.020 - Report created 05/03/2014 at 15:23:07
# Updated 27/02/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : brooklinmon - CROOKED
# Running from : C:\Users\brooklinmon\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\OCS

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16798


-\\ Mozilla Firefox v27.0.1 (de)

[ File : C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [23485 octets] - [04/03/2014 07:34:24]
AdwCleaner[R1].txt - [936 octets] - [05/03/2014 15:20:30]
AdwCleaner[S0].txt - [23613 octets] - [04/03/2014 07:38:13]
AdwCleaner[S1].txt - [860 octets] - [05/03/2014 15:23:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [919 octets] ##########
3. JRT

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Ultimate x86
Ran by brooklinmon on 05.03.2014 at 15:27:13,49
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\brooklinmon\AppData\Roaming\mozilla\firefox\profiles\cipypa2e.default\minidumps [21 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.03.2014 at 15:28:51,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4. FRST

FRST Logfile:


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 01
Ran by brooklinmon (administrator) on CROOKED on 05-03-2014 15:31:49
Running from C:\Users\brooklinmon\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [350072 2012-03-09] ()
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-11-27] (Sony Corporation)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-06] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.gmx.net/br/ie10_startpage
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE0B822A4CD61CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {365945E8-D652-441A-A6A3-387EC2F8DB81} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {7499225C-FBD3-40EB-8C20-500F5FC83699} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {B465D695-BB2A-45E0-80AF-B0A94D75643C} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {D969FF7D-81F5-4044-B576-9339C8AD5D17} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default
FF DefaultSearchEngine: The Pirate Bay
FF SelectedSearchEngine: The Pirate Bay
FF Homepage: hxxp://go.gmx.net/tb/mff_startpage_homepage
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*'))%20%7B%20return%20'PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 - C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @torrentstream.net/tsplugin,version=2.0 - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\player\npts_plugin.dll (Innovative Digital Technologies)
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dastelefonbuch.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dateiendungen-endungende.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\head-fiorg.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\kinode.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\the-pirate-bay.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\urban-dictionary.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: British English Dictionary - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2013-06-05]
FF Extension: FoxyProxy Standard - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\foxyproxy@eric.h.jung [2014-02-04]
FF Extension: Forecastfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2013-06-05]
FF Extension: FireShot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-01-28]
FF Extension: Flagfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2013-12-16]
FF Extension: TV-Fox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: FoxyTunes - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2013-06-05]
FF Extension: FT DeepDark - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-22]
FF Extension: Clear Cache - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\clearcache@michel.de.almeida.xpi [2013-06-05]
FF Extension: Facebook Disconnect - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\facebook@disconnect.me.xpi [2013-06-05]
FF Extension: Ghostery - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-07-05]
FF Extension: Mein Preis - Amazon Preisverlauf - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QqA8RBLaxLGXxg@jetpack.xpi [2013-06-05]
FF Extension: ShareMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\sharemenot@franziroesner.com.xpi [2013-06-05]
FF Extension: Thumbnail Zoom Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\thumbnailZoom@dadler.github.com.xpi [2013-09-18]
FF Extension: GMX MailCheck - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\toolbar@gmx.net.xpi [2013-06-06]
FF Extension: TrackMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-06-05]
FF Extension: Facebook Phishing Protector - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2013-06-05]
FF Extension: Copy Plain Text - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{723AAF16-AF1F-4404-A5D7-0BFE39766605}.xpi [2013-06-05]
FF Extension: NoScript - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-27]
FF Extension: DownThemAll! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-06-05]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org
FF Extension: TS Magic Player - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org [2013-06-25]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] ()
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51784 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41544 2013-09-04] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15944 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [186952 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] ()
S3 FLASHSYS; C:\Program Files\MSI\Live Update 4\LU4\FLASHSYS.sys [9216 2007-12-14] ()
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [63872 2011-02-10] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2011-02-10] (Renesas Electronics Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-01-19] ()
S3 catchme; \??\C:\Users\BROOKL~1\AppData\Local\Temp\catchme.sys [X]
S3 PCAlertDriver; \??\C:\Program Files\MSI\PC Alert 4\NTGLM7X.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2099-09-22 02:30 - 2014-02-06 22:58 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2099-06-05 08:26 - 2013-06-05 08:32 - 00000000 ____D () C:\Windows\Panther
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:47 - 2014-03-05 15:23 - 01360306 _____ () C:\Windows\WindowsUpdate.log
2099-06-05 07:43 - 15013-06-05 08:04 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-05 15:28 - 2014-03-05 15:28 - 00000765 _____ () C:\Users\brooklinmon\Desktop\JRT.txt
2014-03-05 15:27 - 2014-03-05 15:27 - 00000000 ____D () C:\Windows\ERUNT
2014-03-05 15:25 - 2014-03-05 15:25 - 01037734 _____ (Thisisu) C:\Users\brooklinmon\Desktop\JRT.exe
2014-03-05 15:24 - 2014-03-05 15:24 - 00000998 _____ () C:\Users\brooklinmon\Desktop\AdwCleaner[S1].txt
2014-03-05 15:19 - 2014-03-05 15:19 - 01244192 _____ () C:\Users\brooklinmon\Desktop\adwcleaner.exe
2014-03-05 15:06 - 2014-03-05 15:06 - 00001063 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-05 15:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-05 15:05 - 2014-03-05 15:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\brooklinmon\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-05 00:04 - 2014-03-05 00:04 - 00009167 _____ () C:\Users\brooklinmon\Documents\es ist nicht das schweigen.odt
2014-03-04 15:42 - 2014-03-04 15:42 - 00015056 _____ () C:\Users\brooklinmon\Desktop\combofix.log
2014-03-04 15:41 - 2014-03-04 15:41 - 00015056 _____ () C:\ComboFix.txt
2014-03-04 15:33 - 2014-03-04 15:41 - 00000000 ____D () C:\Windows\erdnt
2014-03-04 15:33 - 2014-03-04 15:41 - 00000000 ____D () C:\Qoobox
2014-03-04 15:33 - 2014-03-04 15:33 - 05187080 ____R (Swearware) C:\Users\brooklinmon\Downloads\ComboFix.exe
2014-03-04 15:33 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-04 15:33 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-04 15:33 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-04 14:16 - 2014-03-04 14:16 - 00002932 _____ () C:\Users\brooklinmon\Desktop\gmer.log
2014-03-04 14:02 - 2014-03-04 14:02 - 00051931 _____ () C:\Users\brooklinmon\Desktop\FRST.txt
2014-03-04 14:01 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Desktop\Addition.txt
2014-03-04 14:00 - 2014-03-05 15:31 - 00019581 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-05 15:31 - 00000000 ____D () C:\FRST
2014-03-04 14:00 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Downloads\Addition.txt
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 07:59 - 2014-03-04 08:01 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 07:47 - 2014-03-04 07:58 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:34 - 2014-03-05 15:23 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-24 00:32 - 2014-02-24 00:35 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-22 11:54 - 2014-03-04 14:03 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:47 - 2014-02-22 00:49 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-20 10:58 - 2013-12-18 06:13 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:43 - 2014-02-18 00:45 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:43 - 2014-02-18 00:45 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:36 - 2014-02-18 02:08 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:24 - 2014-02-17 01:38 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 00:43 - 2014-02-16 01:26 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 12:42 - 2014-02-25 12:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 23:03 - 2014-02-22 00:11 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-14 21:52 - 2014-02-14 21:54 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:46 - 2014-02-14 21:51 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:12 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 14:09 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 14:09 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 14:09 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-12 14:08 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 14:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 01:00 - 2014-02-11 01:09 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 03:55 - 2014-02-08 04:22 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 19:24 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-06 19:18 - 2014-02-06 19:23 - 00040629 _____ () C:\LU4.log
2014-02-06 01:32 - 2014-02-07 00:45 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-05 17:06 - 2014-02-05 22:11 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 00:47 - 2014-02-04 01:19 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt

==================== One Month Modified Files and Folders =======

2099-06-05 08:23 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2099-06-05 08:23 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 08:04 - 15013-06-05 07:43 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:43 - 2009-07-14 08:49 - 00000000 ____D () C:\Windows\CSC
2099-06-05 07:43 - 2009-07-14 05:34 - 00001778 _____ () C:\Windows\DtcInstall.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-05 15:31 - 2014-03-04 14:00 - 00019581 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-05 15:31 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-05 15:31 - 2013-06-05 23:21 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\NetSpeedMonitor
2014-03-05 15:31 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-05 15:31 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-05 15:28 - 2014-03-05 15:28 - 00000765 _____ () C:\Users\brooklinmon\Desktop\JRT.txt
2014-03-05 15:28 - 2013-06-05 08:26 - 01643200 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-05 15:27 - 2014-03-05 15:27 - 00000000 ____D () C:\Windows\ERUNT
2014-03-05 15:27 - 15013-06-05 07:47 - 01360306 _____ () C:\Windows\WindowsUpdate.log
2014-03-05 15:25 - 2014-03-05 15:25 - 01037734 _____ (Thisisu) C:\Users\brooklinmon\Desktop\JRT.exe
2014-03-05 15:24 - 2014-03-05 15:24 - 00000998 _____ () C:\Users\brooklinmon\Desktop\AdwCleaner[S1].txt
2014-03-05 15:24 - 2013-09-25 23:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-05 15:24 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-05 15:24 - 2009-07-14 05:39 - 00069244 _____ () C:\Windows\setupact.log
2014-03-05 15:23 - 2014-03-04 07:34 - 00000000 ____D () C:\AdwCleaner
2014-03-05 15:19 - 2014-03-05 15:19 - 01244192 _____ () C:\Users\brooklinmon\Desktop\adwcleaner.exe
2014-03-05 15:16 - 2013-06-06 00:16 - 00111346 _____ () C:\Windows\PFRO.log
2014-03-05 15:16 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Cursors
2014-03-05 15:06 - 2014-03-05 15:06 - 00001063 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-05 15:06 - 2013-06-06 03:29 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\uTorrent
2014-03-05 15:05 - 2014-03-05 15:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\brooklinmon\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-05 14:58 - 2013-09-25 23:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-05 00:15 - 2013-06-05 11:34 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\vlc
2014-03-05 00:04 - 2014-03-05 00:04 - 00009167 _____ () C:\Users\brooklinmon\Documents\es ist nicht das schweigen.odt
2014-03-04 15:42 - 2014-03-04 15:42 - 00015056 _____ () C:\Users\brooklinmon\Desktop\combofix.log
2014-03-04 15:41 - 2014-03-04 15:41 - 00015056 _____ () C:\ComboFix.txt
2014-03-04 15:41 - 2014-03-04 15:33 - 00000000 ____D () C:\Windows\erdnt
2014-03-04 15:41 - 2014-03-04 15:33 - 00000000 ____D () C:\Qoobox
2014-03-04 15:41 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-03-04 15:41 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-04 15:41 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-04 15:33 - 2014-03-04 15:33 - 05187080 ____R (Swearware) C:\Users\brooklinmon\Downloads\ComboFix.exe
2014-03-04 14:16 - 2014-03-04 14:16 - 00002932 _____ () C:\Users\brooklinmon\Desktop\gmer.log
2014-03-04 14:03 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-03-04 14:02 - 2014-03-04 14:02 - 00051931 _____ () C:\Users\brooklinmon\Desktop\FRST.txt
2014-03-04 14:01 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Desktop\Addition.txt
2014-03-04 14:01 - 2014-03-04 14:00 - 00030344 _____ () C:\Users\brooklinmon\Downloads\Addition.txt
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 08:01 - 2014-03-04 07:59 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 08:01 - 2013-06-05 09:31 - 00000000 ____D () C:\Users\brooklinmon
2014-03-04 07:58 - 2014-03-04 07:47 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:42 - 2014-01-19 17:49 - 00000000 ____D () C:\ProgramData\AllMyBooks
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-03-02 09:14 - 2013-06-06 00:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-27 21:15 - 2013-06-06 08:20 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\XnView
2014-02-25 12:24 - 2013-06-07 10:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-25 12:24 - 2013-06-07 10:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-25 12:21 - 2014-02-15 12:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 00:41 - 2013-06-26 10:24 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\MyPhoneExplorer
2014-02-24 22:06 - 2013-06-11 04:01 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Skype
2014-02-24 00:35 - 2014-02-24 00:32 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-24 00:09 - 2013-08-21 14:04 - 00002180 _____ () C:\Users\Public\Desktop\Free Audio Converter.lnk
2014-02-24 00:09 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-24 00:08 - 2013-12-26 15:53 - 33524456 _____ (DVDVideoSoft Ltd. ) C:\Users\brooklinmon\Downloads\FreeAudioConverter.exe
2014-02-24 00:08 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 00:08 - 2013-07-26 21:16 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\DVDVideoSoft
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:49 - 2014-02-22 00:47 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-22 00:11 - 2014-02-14 23:03 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-20 10:51 - 2013-06-06 00:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:08 - 2014-02-18 00:36 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:45 - 2014-02-18 00:43 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:45 - 2014-02-18 00:43 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:38 - 2014-02-17 01:24 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 01:26 - 2014-02-16 00:43 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 15:44 - 2013-07-02 23:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-14 21:54 - 2014-02-14 21:52 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:51 - 2014-02-14 21:46 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-12 14:12 - 2013-07-11 11:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 14:11 - 2013-06-05 22:32 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 01:09 - 2014-02-11 01:00 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 04:22 - 2014-02-08 03:55 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-07 00:45 - 2014-02-06 01:32 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-06 23:02 - 2013-06-13 21:44 - 00000000 ____D () C:\Program Files\MSI
2014-02-06 23:00 - 2013-06-05 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 22:58 - 2289-09-22 02:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 22:57 - 2013-06-05 09:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-06 19:23 - 2014-02-06 19:18 - 00040629 _____ () C:\LU4.log
2014-02-06 19:23 - 2013-06-06 00:11 - 00000000 ____D () C:\Program Files\Realtek
2014-02-06 01:39 - 2013-08-19 00:04 - 00001020 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 22:11 - 2014-02-05 17:06 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 01:19 - 2014-02-04 00:47 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt

Files to move or delete:
====================
C:\Users\brooklinmon\setup.exe


Some content of TEMP:
====================
C:\Users\brooklinmon\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 12:14

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---



passt das so?


Alt 06.03.2014, 12:13   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Windows 7, Rechner friert ein, ist dlprotect.exe schuld?

Alt 07.03.2014, 22:39   #7
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


okay... der ESET-scanner braucht ja echt seine zeit... und bei den ersten beiden versuchen ist mir wieder der pc eingefroren und ließ sich auch erst nach ein paar minuten wartezeit wieder hochfahren.

das einfrieren ereignete sich jeweils nach geraumer zeit und zwar während der scanner nicht die systemplatte, sondern mein speicherlaufwerk durchsuchte. genauer, beim scan durch meine doch recht große e-book-sammlung.

da ich bereits zuvor des öfteren probleme mit meiner e-book-verwaltung (sony reader software) hatte - nämlich lange ladezeiten der verzeichnisse, programm einige sekunden nicht reagierend -, frage ich mich jetzt, ob das problem kein trojaner oder sonstige schadsoftware ist, sondern einfach mein alter rechner mit der verwaltung dieser riesigen anzahl kleiner dateien überfordert ist?

dann wäre ich vielleicht falsch hier auf dem board, aber der hilfsbereite user namens schrauber kann mir bestimmt auch darauf eine antwort geben, oder...?!



aber... beim dritten durchlauf ging alles glatt mit ESET, hier also die benötigten log-files:

1. eset

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1957351a43aa234d821a1e4f719502d3
# engine=17349
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-07 05:02:56
# local_time=2014-03-07 06:02:56 (+0100, W. Europe Standard Time)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 97 26991 259559466 0 0
# compatibility_mode=5893 16776573 100 94 257922 145799767 0 0
# scanned=713843
# found=3
# cleaned=0
# scan_time=19693
sh=49CDA7565684CDF9DF364338653A753602A12489 ft=1 fh=2855318d22aaf596 vn="a variant of Win32/SpeedingUpMyPC.B application" ac=I fn="C:\Windows.old\$Recycle.Bin\S-1-5-21-838974909-1129354563-2068565827-1001\$RKTHT9O\FlashPlayer_151\software\OptimizerPro.exe"
sh=AD901048F7C6A46D84F4533DB74C81B05A32CECD ft=1 fh=37887e2f9b0a40d5 vn="Win32/StartPage.OPH trojan" ac=I fn="C:\Windows.old\Documents and Settings\Rainer\Downloads\vlc-2.0.2-win32.exe"
sh=AD901048F7C6A46D84F4533DB74C81B05A32CECD ft=1 fh=37887e2f9b0a40d5 vn="Win32/StartPage.OPH trojan" ac=I fn="C:\Windows.old\Users\Rainer\Downloads\vlc-2.0.2-win32.exe"
2. security check

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java(TM) 6 Update 24  
 Java version out of Date! 
 Adobe Flash Player 	12.0.0.70  
 Mozilla Firefox (27.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 18% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````
3. FRST


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 01
Ran by brooklinmon (administrator) on CROOKED on 07-03-2014 09:19:00
Running from C:\Users\brooklinmon\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [350072 2012-03-09] ()
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-11-27] (Sony Corporation)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-06] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.gmx.net/br/ie10_startpage
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE0B822A4CD61CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {365945E8-D652-441A-A6A3-387EC2F8DB81} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {7499225C-FBD3-40EB-8C20-500F5FC83699} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {B465D695-BB2A-45E0-80AF-B0A94D75643C} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {D969FF7D-81F5-4044-B576-9339C8AD5D17} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default
FF DefaultSearchEngine: Wikipedia (de)
FF SelectedSearchEngine: Wikipedia (de)
FF Homepage: hxxp://go.gmx.net/tb/mff_startpage_homepage
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 - C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @torrentstream.net/tsplugin,version=2.0 - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\player\npts_plugin.dll (Innovative Digital Technologies)
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dastelefonbuch.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dateiendungen-endungende.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\head-fiorg.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\kinode.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\the-pirate-bay.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\urban-dictionary.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: British English Dictionary - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2013-06-05]
FF Extension: FoxyProxy Standard - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\foxyproxy@eric.h.jung [2014-02-04]
FF Extension: Forecastfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2013-06-05]
FF Extension: FireShot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-01-28]
FF Extension: Flagfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2013-12-16]
FF Extension: TV-Fox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: FoxyTunes - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2013-06-05]
FF Extension: FT DeepDark - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-22]
FF Extension: Clear Cache - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\clearcache@michel.de.almeida.xpi [2013-06-05]
FF Extension: Facebook Disconnect - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\facebook@disconnect.me.xpi [2013-06-05]
FF Extension: Ghostery - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-07-05]
FF Extension: Mein Preis - Amazon Preisverlauf - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QqA8RBLaxLGXxg@jetpack.xpi [2013-06-05]
FF Extension: ShareMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\sharemenot@franziroesner.com.xpi [2013-06-05]
FF Extension: Thumbnail Zoom Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\thumbnailZoom@dadler.github.com.xpi [2013-09-18]
FF Extension: GMX MailCheck - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\toolbar@gmx.net.xpi [2013-06-06]
FF Extension: TrackMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-06-05]
FF Extension: Facebook Phishing Protector - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2013-06-05]
FF Extension: Copy Plain Text - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{723AAF16-AF1F-4404-A5D7-0BFE39766605}.xpi [2013-06-05]
FF Extension: NoScript - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-27]
FF Extension: DownThemAll! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-06-05]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org
FF Extension: TS Magic Player - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org [2013-06-25]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] ()
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51784 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41544 2013-09-04] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15944 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [186952 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] ()
S3 FLASHSYS; C:\Program Files\MSI\Live Update 4\LU4\FLASHSYS.sys [9216 2007-12-14] ()
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [63872 2011-02-10] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2011-02-10] (Renesas Electronics Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-01-19] ()
S3 catchme; \??\C:\Users\BROOKL~1\AppData\Local\Temp\catchme.sys [X]
S3 PCAlertDriver; \??\C:\Program Files\MSI\PC Alert 4\NTGLM7X.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2099-09-22 02:30 - 2014-02-06 22:58 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2099-06-05 08:26 - 2013-06-05 08:32 - 00000000 ____D () C:\Windows\Panther
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:47 - 2014-03-07 09:12 - 01423580 _____ () C:\Windows\WindowsUpdate.log
2099-06-05 07:43 - 15013-06-05 08:04 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-07 09:18 - 2014-03-07 09:18 - 00000965 _____ () C:\Users\brooklinmon\Desktop\checkup.txt
2014-03-07 09:13 - 2014-03-07 09:13 - 00987442 _____ () C:\Users\brooklinmon\Desktop\SecurityCheck.exe
2014-03-06 13:35 - 2014-03-06 13:35 - 02347384 _____ (ESET) C:\Users\brooklinmon\Downloads\esetsmartinstaller_enu.exe
2014-03-05 15:32 - 2014-03-05 15:32 - 00055539 _____ () C:\Users\brooklinmon\Desktop\FRST02.txt
2014-03-05 15:28 - 2014-03-05 15:28 - 00000765 _____ () C:\Users\brooklinmon\Desktop\JRT.txt
2014-03-05 15:27 - 2014-03-05 15:27 - 00000000 ____D () C:\Windows\ERUNT
2014-03-05 15:25 - 2014-03-05 15:25 - 01037734 _____ (Thisisu) C:\Users\brooklinmon\Desktop\JRT.exe
2014-03-05 15:24 - 2014-03-05 15:24 - 00000998 _____ () C:\Users\brooklinmon\Desktop\AdwCleaner[S1].txt
2014-03-05 15:19 - 2014-03-05 15:19 - 01244192 _____ () C:\Users\brooklinmon\Desktop\adwcleaner.exe
2014-03-05 15:06 - 2014-03-05 15:06 - 00001063 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-05 15:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-05 15:05 - 2014-03-05 15:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\brooklinmon\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-05 00:04 - 2014-03-05 00:04 - 00009167 _____ () C:\Users\brooklinmon\Documents\es ist nicht das schweigen.odt
2014-03-04 15:42 - 2014-03-04 15:42 - 00015056 _____ () C:\Users\brooklinmon\Desktop\combofix.log
2014-03-04 15:41 - 2014-03-04 15:41 - 00015056 _____ () C:\ComboFix.txt
2014-03-04 15:33 - 2014-03-04 15:41 - 00000000 ____D () C:\Windows\erdnt
2014-03-04 15:33 - 2014-03-04 15:41 - 00000000 ____D () C:\Qoobox
2014-03-04 15:33 - 2014-03-04 15:33 - 05187080 ____R (Swearware) C:\Users\brooklinmon\Downloads\ComboFix.exe
2014-03-04 15:33 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-04 15:33 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-04 15:33 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-04 15:33 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-04 14:16 - 2014-03-04 14:16 - 00002932 _____ () C:\Users\brooklinmon\Desktop\gmer.log
2014-03-04 14:02 - 2014-03-04 14:02 - 00051931 _____ () C:\Users\brooklinmon\Desktop\FRST.txt
2014-03-04 14:01 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Desktop\Addition.txt
2014-03-04 14:00 - 2014-03-07 09:19 - 00019817 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-07 09:19 - 00000000 ____D () C:\FRST
2014-03-04 14:00 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Downloads\Addition.txt
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 07:59 - 2014-03-04 08:01 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 07:47 - 2014-03-04 07:58 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:34 - 2014-03-05 15:23 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-24 00:32 - 2014-02-24 00:35 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-22 11:54 - 2014-03-04 14:03 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:47 - 2014-02-22 00:49 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-20 10:58 - 2013-12-18 06:13 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:43 - 2014-02-18 00:45 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:43 - 2014-02-18 00:45 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:36 - 2014-02-18 02:08 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:24 - 2014-02-17 01:38 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 00:43 - 2014-02-16 01:26 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 12:42 - 2014-02-25 12:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 23:03 - 2014-02-22 00:11 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-14 21:52 - 2014-02-14 21:54 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:46 - 2014-02-14 21:51 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:12 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 14:09 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 14:09 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 14:09 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-12 14:08 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 14:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 01:00 - 2014-02-11 01:09 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 03:55 - 2014-02-08 04:22 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 19:24 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-06 19:18 - 2014-02-06 19:23 - 00040629 _____ () C:\LU4.log
2014-02-06 01:32 - 2014-02-07 00:45 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-05 17:06 - 2014-02-05 22:11 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier

==================== One Month Modified Files and Folders =======

2099-06-05 08:23 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2099-06-05 08:23 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 08:04 - 15013-06-05 07:43 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:43 - 2009-07-14 08:49 - 00000000 ____D () C:\Windows\CSC
2099-06-05 07:43 - 2009-07-14 05:34 - 00001778 _____ () C:\Windows\DtcInstall.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-07 09:19 - 2014-03-04 14:00 - 00019817 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-07 09:19 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-07 09:18 - 2014-03-07 09:18 - 00000965 _____ () C:\Users\brooklinmon\Desktop\checkup.txt
2014-03-07 09:18 - 2013-06-05 23:21 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\NetSpeedMonitor
2014-03-07 09:13 - 2014-03-07 09:13 - 00987442 _____ () C:\Users\brooklinmon\Desktop\SecurityCheck.exe
2014-03-07 09:12 - 15013-06-05 07:47 - 01423580 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 08:58 - 2013-09-25 23:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 00:58 - 2013-09-25 23:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 00:08 - 2013-06-06 03:29 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\uTorrent
2014-03-07 00:06 - 2013-06-05 11:34 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\vlc
2014-03-06 21:08 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-06 21:08 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-06 21:04 - 2013-06-05 08:26 - 01643200 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-06 21:00 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-06 21:00 - 2009-07-14 05:39 - 00070318 _____ () C:\Windows\setupact.log
2014-03-06 13:35 - 2014-03-06 13:35 - 02347384 _____ (ESET) C:\Users\brooklinmon\Downloads\esetsmartinstaller_enu.exe
2014-03-05 15:32 - 2014-03-05 15:32 - 00055539 _____ () C:\Users\brooklinmon\Desktop\FRST02.txt
2014-03-05 15:28 - 2014-03-05 15:28 - 00000765 _____ () C:\Users\brooklinmon\Desktop\JRT.txt
2014-03-05 15:27 - 2014-03-05 15:27 - 00000000 ____D () C:\Windows\ERUNT
2014-03-05 15:25 - 2014-03-05 15:25 - 01037734 _____ (Thisisu) C:\Users\brooklinmon\Desktop\JRT.exe
2014-03-05 15:24 - 2014-03-05 15:24 - 00000998 _____ () C:\Users\brooklinmon\Desktop\AdwCleaner[S1].txt
2014-03-05 15:23 - 2014-03-04 07:34 - 00000000 ____D () C:\AdwCleaner
2014-03-05 15:19 - 2014-03-05 15:19 - 01244192 _____ () C:\Users\brooklinmon\Desktop\adwcleaner.exe
2014-03-05 15:16 - 2013-06-06 00:16 - 00111346 _____ () C:\Windows\PFRO.log
2014-03-05 15:16 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Cursors
2014-03-05 15:06 - 2014-03-05 15:06 - 00001063 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-05 15:05 - 2014-03-05 15:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\brooklinmon\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-05 00:04 - 2014-03-05 00:04 - 00009167 _____ () C:\Users\brooklinmon\Documents\es ist nicht das schweigen.odt
2014-03-04 15:42 - 2014-03-04 15:42 - 00015056 _____ () C:\Users\brooklinmon\Desktop\combofix.log
2014-03-04 15:41 - 2014-03-04 15:41 - 00015056 _____ () C:\ComboFix.txt
2014-03-04 15:41 - 2014-03-04 15:33 - 00000000 ____D () C:\Windows\erdnt
2014-03-04 15:41 - 2014-03-04 15:33 - 00000000 ____D () C:\Qoobox
2014-03-04 15:41 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-03-04 15:41 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-04 15:41 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-04 15:33 - 2014-03-04 15:33 - 05187080 ____R (Swearware) C:\Users\brooklinmon\Downloads\ComboFix.exe
2014-03-04 14:16 - 2014-03-04 14:16 - 00002932 _____ () C:\Users\brooklinmon\Desktop\gmer.log
2014-03-04 14:03 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-03-04 14:02 - 2014-03-04 14:02 - 00051931 _____ () C:\Users\brooklinmon\Desktop\FRST.txt
2014-03-04 14:01 - 2014-03-04 14:01 - 00030344 _____ () C:\Users\brooklinmon\Desktop\Addition.txt
2014-03-04 14:01 - 2014-03-04 14:00 - 00030344 _____ () C:\Users\brooklinmon\Downloads\Addition.txt
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 08:01 - 2014-03-04 07:59 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 08:01 - 2013-06-05 09:31 - 00000000 ____D () C:\Users\brooklinmon
2014-03-04 07:58 - 2014-03-04 07:47 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:42 - 2014-01-19 17:49 - 00000000 ____D () C:\ProgramData\AllMyBooks
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-03-02 09:14 - 2013-06-06 00:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-27 21:15 - 2013-06-06 08:20 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\XnView
2014-02-25 12:24 - 2013-06-07 10:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-25 12:24 - 2013-06-07 10:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-25 12:21 - 2014-02-15 12:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 00:41 - 2013-06-26 10:24 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\MyPhoneExplorer
2014-02-24 22:06 - 2013-06-11 04:01 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Skype
2014-02-24 00:35 - 2014-02-24 00:32 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-24 00:09 - 2013-08-21 14:04 - 00002180 _____ () C:\Users\Public\Desktop\Free Audio Converter.lnk
2014-02-24 00:09 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-24 00:08 - 2013-12-26 15:53 - 33524456 _____ (DVDVideoSoft Ltd. ) C:\Users\brooklinmon\Downloads\FreeAudioConverter.exe
2014-02-24 00:08 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 00:08 - 2013-07-26 21:16 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\DVDVideoSoft
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:49 - 2014-02-22 00:47 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-22 00:11 - 2014-02-14 23:03 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-20 10:51 - 2013-06-06 00:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:08 - 2014-02-18 00:36 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:45 - 2014-02-18 00:43 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:45 - 2014-02-18 00:43 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:38 - 2014-02-17 01:24 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 01:26 - 2014-02-16 00:43 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 15:44 - 2013-07-02 23:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-14 21:54 - 2014-02-14 21:52 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:51 - 2014-02-14 21:46 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-12 14:12 - 2013-07-11 11:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 14:11 - 2013-06-05 22:32 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 01:09 - 2014-02-11 01:00 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 04:22 - 2014-02-08 03:55 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-07 00:45 - 2014-02-06 01:32 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-06 23:02 - 2013-06-13 21:44 - 00000000 ____D () C:\Program Files\MSI
2014-02-06 23:00 - 2013-06-05 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 22:58 - 2289-09-22 02:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 22:57 - 2013-06-05 09:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-06 19:23 - 2014-02-06 19:18 - 00040629 _____ () C:\LU4.log
2014-02-06 19:23 - 2013-06-06 00:11 - 00000000 ____D () C:\Program Files\Realtek
2014-02-06 01:39 - 2013-08-19 00:04 - 00001020 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 22:11 - 2014-02-05 17:06 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier

Files to move or delete:
====================
C:\Users\brooklinmon\setup.exe


Some content of TEMP:
====================
C:\Users\brooklinmon\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 12:14

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---
Alt 08.03.2014, 20:10   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Adware und malware war schon drauf, die ist jetzt aber runter.

Java updaten. Ordner Windows.old löschen.


Das kann schon sein dass der Rechner einfach alt ist. Versuchen wir mal noch was:

Downloade dir bitte Windows Repair (All In One) von hier.
  • Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
  • Klicke auf Step 2 und drücke unter Check Disk auf Do It.

  • Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

  • Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

  • Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
  • Hake Restart System when Finished an.
  • Drücke Start.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 12.03.2014, 21:45   #9
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


hallo schrauber,

mit etwas verspätung möchte ich hier jetzt nochmal DANKESCHÖN sagen, fürs zeit nehmen und mühe geben und helfen!!!!

leider hab ich immer noch - ab und zu - das einfrier-problem, hauptsächlich beim abspielen von hd-videos, bzw. beim arbeiten mit mehreren geöffneten anwendungen. also wohl eher ein problem überfordeter hardware (und/oder veralteter codecs, treiber...)

anyway, das saubermachen war ja dennoch sehr nötig und also hilfreich!

danke und liebe grüße,
rainer

Alt 13.03.2014, 13:22   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Ja, check mal Hardware und Treiber.

Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 7, Rechner friert ein, ist dlprotect.exe schuld?
4d36e972-e325-11ce-bfc1-08002be10318, antivir, askbar, browser, dlprotect.exe, download protect, driver booster, dvdvideosoft ltd., einfrieren, failed, goodgame, google, hacktool.agent, mozilla, pup.optional.conduit.a, pup.optional.opencandy, pup.optional.resultsalpha.a, pup.optional.softonic.a, realtek, required, security, svchost.exe, system, win32/speedingupmypc.b, win32/startpage.oph


« Windows8, Popups, Werbung im Browser, | Firefox lässt sich nicht mehr starten, auch nicht nach Neuinstallation (Win 7 prof. 64-Bit) »


Ähnliche Themen: Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


  1. Windows 8: automatische Updatefunktion in den Diensten fehlt, Rechner friert gelegentlich ein/wird extrem langsam
    Log-Analyse und Auswertung - 07.07.2015 (1)
  2. Win 7: Rechner friert ein
    Log-Analyse und Auswertung - 09.02.2015 (17)
  3. Windows 8: dlprotect und snap do
    Log-Analyse und Auswertung - 28.03.2014 (17)
  4. Rechner "friert ein" - Entdeckung dlprotect.exe im Infobereich als Ursache?
    Plagegeister aller Art und deren Bekämpfung - 12.03.2014 (19)
  5. Windows 7 64bit - Rechner friert ein
    Log-Analyse und Auswertung - 01.10.2013 (1)
  6. Mein Rechner lädt so langsam in letzter Zeit Toolbar Quickshare daran schuld? (Snapshot.do virus? )
    Plagegeister aller Art und deren Bekämpfung - 27.08.2013 (13)
  7. [Windows 7] Rechner friert plötzlich ein
    Netzwerk und Hardware - 28.10.2012 (33)
  8. Ist Windows 8 Schuld?
    Alles rund um Windows - 19.07.2012 (4)
  9. Bin ich, bzw ist mein Rechner schuld?
    Diskussionsforum - 25.12.2011 (1)
  10. Rechner booted immer wieder neu - vermutlich Virus JAVA/Dldr.Agent.L daran Schuld
    Plagegeister aller Art und deren Bekämpfung - 06.04.2010 (9)
  11. Laptop sehr langsam und friert ein. Trojaner TR/Crypt.XPACK.Gen schuld?
    Plagegeister aller Art und deren Bekämpfung - 23.02.2010 (9)
  12. Windows 7 Absturz, schwerer Ausnahmefehler! Rechner friert ein.
    Alles rund um Windows - 28.12.2009 (1)
  13. I-Explorer friert ein/Antivir schuld?
    Log-Analyse und Auswertung - 21.07.2008 (2)
  14. Probleme mit Hotmail und Windows-Webseiten - Malware schuld?
    Plagegeister aller Art und deren Bekämpfung - 21.01.2008 (4)
  15. Rechner friert ein
    Netzwerk und Hardware - 23.09.2007 (5)
  16. Rechner friert ein
    Log-Analyse und Auswertung - 28.07.2007 (7)
  17. sp.exe schuld das windows nicht mehr startet?
    Plagegeister aller Art und deren Bekämpfung - 15.03.2005 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Hallo, habe seit kurzem das Problem, dass der Rechner hin und wieder einfriert. Scanne mein System regelmäßig mit Avira (ist auch mein Echtzeitschutz/Scanner), hatte aber keinen Sucherfolg. Heute habe ich - Windows 7, Rechner friert ein, ist dlprotect.exe schuld?...
Archiv
Du betrachtest: Windows 7, Rechner friert ein, ist dlprotect.exe schuld? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130