| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7 Pro 64 - Werbung wird im Firefox und auch Chrome eingeblendetWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.04.2014, 15:27
| #11 |
| |  Windows 7 Pro 64 - Werbung wird im Firefox und auch Chrome eingeblendetCode:
ATTFilter Results of screen317's Security Check version 0.99.81 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Microsoft Security Essentials Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 51 Adobe Flash Player 12.0.0.77 Adobe Reader XI Mozilla Firefox (28.0) Google Chrome 32.0.1700.102 Google Chrome 32.0.1700.76 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials msseces.exe Windows Defender MSMpEng.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-04-2014 01 Ran by tompe (administrator) on TOMPE-PC on 16-04-2014 16:23:31 Running from C:\Users\tompe\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe (Lenovo.) C:\Windows\system32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SAsrv.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295720 2013-10-25] (Lenovo Group Limited) HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-06-01] (Intel Corporation) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11586944 2012-06-18] (Motorola Solutions, Inc.) HKLM\...\Run: [] => [X] HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [384296 2013-10-28] (Lenovo.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [66560 2013-04-09] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-14] (Intel Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508144 2012-08-31] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-957510524-1799324732-247505994-1000\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKU\S-1-5-21-957510524-1799324732-247505994-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation) AppInit_DLLs: C:\PROGRA~2\GS-ENA~1\ASSIST~2.DLL => C:\PROGRA~2\GS-ENA~1\ASSIST~2.DLL File Not Found AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x25104DEFA2FDCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF ProfilePath: C:\Users\tompe\AppData\Roaming\Mozilla\Firefox\Profiles\bido3j62.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files\Lenovo Fingerprint Reader\npffwloplugin.dll (AuthenTec, Inc) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\tompe\AppData\Roaming\Mozilla\Firefox\Profiles\bido3j62.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-19] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-20] CHR Extension: (Google Drive) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-20] CHR Extension: (SavvENoewaAppzu) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfekjngdhffgnecgimlkeobklkfgacdo [2014-02-28] CHR Extension: (YouTube) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-20] CHR Extension: (Website Logon) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\clglhglbidpdbjffpfcldkifhdegdfle [2014-01-20] CHR Extension: (Google-Suche) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-20] CHR Extension: (Google Wallet) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-20] CHR Extension: (Google Mail) - C:\Users\tompe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-20] CHR HKLM-x32\...\Chrome\Extension: [clglhglbidpdbjffpfcldkifhdegdfle] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2013-04-01] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-03-27] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-27] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-27] (Avira Operations GmbH & Co. KG) R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2139944 2013-08-07] (AuthenTec, Inc) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197928 2013-10-25] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] () S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] () R3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401704 2013-07-22] (AuthenTec, Inc.) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation) S2 jhi_service; "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" [X] ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [111104 2012-05-21] (Motorola Solutions, Inc.) S3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [849408 2012-06-09] (Motorola Solutions, Inc.) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-25] (Disc Soft Ltd) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-16] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) R3 RCUVCAVS; C:\Windows\System32\DRIVERS\RCUVCAVS.sys [149632 2013-04-09] (Ricoh co.,Ltd.) R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-26] (Synaptics Incorporated) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-16 16:23 - 2014-04-16 16:23 - 00000000 ____D () C:\Users\tompe\Desktop\FRST-OlderVersion 2014-04-16 15:54 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-16 15:54 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-16 15:54 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-16 15:54 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-16 15:54 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-16 15:54 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-16 15:54 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-16 15:54 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-16 15:54 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-16 15:54 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-16 15:54 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-16 15:54 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-16 15:54 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-16 15:54 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-16 15:54 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-16 15:54 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-16 15:54 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-16 15:54 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-16 15:54 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-16 15:54 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-16 15:54 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-16 15:54 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-16 15:54 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-16 15:54 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-16 15:54 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-16 15:54 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-16 15:54 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-16 15:54 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-16 15:54 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-16 15:54 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-16 15:54 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-16 15:54 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-16 15:54 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-16 15:54 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-16 15:54 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-16 15:54 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-16 15:54 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-16 15:54 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-16 15:54 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-16 15:54 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-16 15:54 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-16 15:54 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-16 15:54 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-16 15:54 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-16 15:54 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-16 15:54 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-16 15:54 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-16 15:54 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-13 23:22 - 2014-04-13 23:22 - 00987448 _____ () C:\Users\tompe\Desktop\SecurityCheck.exe 2014-04-09 12:40 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-09 12:40 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-09 12:40 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-09 12:40 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-09 12:40 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-09 12:40 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-09 12:40 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-09 12:40 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-09 12:40 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-09 12:40 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-09 12:40 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-09 12:40 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-09 12:40 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-09 12:39 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-09 12:39 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-09 12:39 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-09 12:39 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-08 15:51 - 2014-04-08 15:51 - 00000757 _____ () C:\Users\tompe\Desktop\JRT.txt 2014-04-08 15:44 - 2014-04-08 15:44 - 00000000 ____D () C:\Windows\ERUNT 2014-04-08 15:43 - 2014-04-08 15:43 - 01016261 _____ (Thisisu) C:\Users\tompe\Desktop\JRT.exe 2014-04-07 12:53 - 2014-04-08 15:33 - 00000000 ____D () C:\AdwCleaner 2014-04-07 12:52 - 2014-04-07 12:52 - 01426178 _____ () C:\Users\tompe\Desktop\adwcleaner.exe 2014-04-07 12:50 - 2014-04-07 12:50 - 00002506 _____ () C:\Users\tompe\Desktop\mbam.txt 2014-04-07 01:26 - 2014-04-16 16:05 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-07 01:26 - 2014-04-07 01:28 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-07 01:25 - 2014-04-07 01:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-07 01:25 - 2014-04-07 01:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-07 01:25 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-07 01:25 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-07 01:25 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-07 01:17 - 2014-04-07 01:17 - 00001264 _____ () C:\Users\tompe\Desktop\Revo Uninstaller.lnk 2014-04-07 01:17 - 2014-04-07 01:17 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-04-07 01:16 - 2014-04-07 01:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\tompe\Desktop\revosetup95.exe 2014-04-03 11:06 - 2014-04-03 11:06 - 00029266 _____ () C:\Users\tompe\Desktop\Addition.txt 2014-04-03 11:05 - 2014-04-16 16:23 - 00019245 _____ () C:\Users\tompe\Desktop\FRST.txt 2014-04-03 11:04 - 2014-04-16 16:23 - 02158080 _____ (Farbar) C:\Users\tompe\Desktop\FRST64.exe 2014-04-03 11:04 - 2014-04-16 16:23 - 00000000 ____D () C:\FRST 2014-04-02 14:38 - 2014-04-02 14:38 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-04-02 14:38 - 2014-04-02 14:38 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Apple Computer 2014-04-02 14:38 - 2014-04-02 14:38 - 00000000 ____D () C:\Users\tompe\AppData\Local\Apple Computer 2014-04-02 14:38 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-04-02 14:37 - 2014-04-02 14:38 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files\iTunes 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files\iPod 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Users\tompe\AppData\Local\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\ProgramData\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files\Bonjour 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-03-27 13:42 - 2014-04-12 21:26 - 00000000 ___RD () C:\Users\tompe\Dropbox 2014-03-27 13:42 - 2014-03-27 13:42 - 00001001 _____ () C:\Users\tompe\Desktop\Dropbox.lnk 2014-03-27 13:42 - 2014-03-27 13:42 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\DropboxMaster 2014-03-27 13:41 - 2014-04-12 21:26 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Dropbox 2014-03-27 13:41 - 2014-03-27 13:41 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-03-25 18:19 - 2014-03-25 18:19 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\dvdcss 2014-03-25 18:18 - 2014-03-25 18:18 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images 2014-03-25 18:09 - 2014-03-25 18:19 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\DAEMON Tools Lite 2014-03-25 18:09 - 2014-03-25 18:09 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-25 18:09 - 2014-03-25 18:09 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-25 18:08 - 2014-03-25 18:18 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-25 17:46 - 2014-03-25 17:48 - 00000000 ____D () C:\Users\tompe\Documents\My ISO Files 2014-03-17 22:25 - 2014-03-17 22:25 - 00001809 _____ () C:\Users\tompe\Desktop\Downloads.lnk ==================== One Month Modified Files and Folders ======= 2014-04-16 16:23 - 2014-04-16 16:23 - 00000000 ____D () C:\Users\tompe\Desktop\FRST-OlderVersion 2014-04-16 16:23 - 2014-04-03 11:05 - 00019245 _____ () C:\Users\tompe\Desktop\FRST.txt 2014-04-16 16:23 - 2014-04-03 11:04 - 02158080 _____ (Farbar) C:\Users\tompe\Desktop\FRST64.exe 2014-04-16 16:23 - 2014-04-03 11:04 - 00000000 ____D () C:\FRST 2014-04-16 16:14 - 2013-12-20 18:20 - 01389121 _____ () C:\Windows\WindowsUpdate.log 2014-04-16 16:10 - 2014-01-20 11:59 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-16 16:09 - 2009-07-14 06:45 - 00022768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-16 16:09 - 2009-07-14 06:45 - 00022768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-16 16:08 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat 2014-04-16 16:08 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat 2014-04-16 16:08 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-16 16:05 - 2014-04-07 01:26 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-16 16:05 - 2014-01-20 11:59 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-16 16:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-16 16:03 - 2009-07-14 06:51 - 00050264 _____ () C:\Windows\setupact.log 2014-04-16 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-16 00:11 - 2013-12-24 12:25 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\vlc 2014-04-15 22:36 - 2014-01-08 13:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-14 21:47 - 2010-11-21 05:47 - 00157150 _____ () C:\Windows\PFRO.log 2014-04-13 23:22 - 2014-04-13 23:22 - 00987448 _____ () C:\Users\tompe\Desktop\SecurityCheck.exe 2014-04-12 21:26 - 2014-03-27 13:42 - 00000000 ___RD () C:\Users\tompe\Dropbox 2014-04-12 21:26 - 2014-03-27 13:41 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Dropbox 2014-04-12 21:26 - 2013-12-20 18:20 - 00000000 ___RD () C:\Users\tompe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-10 14:27 - 2014-01-02 11:07 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-10 14:25 - 2013-12-20 20:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 14:24 - 2013-12-20 20:02 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-08 15:51 - 2014-04-08 15:51 - 00000757 _____ () C:\Users\tompe\Desktop\JRT.txt 2014-04-08 15:44 - 2014-04-08 15:44 - 00000000 ____D () C:\Windows\ERUNT 2014-04-08 15:43 - 2014-04-08 15:43 - 01016261 _____ (Thisisu) C:\Users\tompe\Desktop\JRT.exe 2014-04-08 15:33 - 2014-04-07 12:53 - 00000000 ____D () C:\AdwCleaner 2014-04-07 12:52 - 2014-04-07 12:52 - 01426178 _____ () C:\Users\tompe\Desktop\adwcleaner.exe 2014-04-07 12:50 - 2014-04-07 12:50 - 00002506 _____ () C:\Users\tompe\Desktop\mbam.txt 2014-04-07 11:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web 2014-04-07 01:28 - 2014-04-07 01:26 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-07 01:28 - 2014-04-07 01:25 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-07 01:25 - 2014-04-07 01:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-07 01:23 - 2014-01-17 13:18 - 00000000 ____D () C:\ProgramData\b6f22d61d98fb02a 2014-04-07 01:17 - 2014-04-07 01:17 - 00001264 _____ () C:\Users\tompe\Desktop\Revo Uninstaller.lnk 2014-04-07 01:17 - 2014-04-07 01:17 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-04-07 01:16 - 2014-04-07 01:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\tompe\Desktop\revosetup95.exe 2014-04-07 01:13 - 2014-01-31 16:07 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-04-07 01:11 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-04-05 12:36 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-04 20:36 - 2013-12-20 18:46 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-04-04 20:36 - 2013-12-20 18:46 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-04-04 20:36 - 2013-12-20 18:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-04-03 21:32 - 2014-01-01 21:25 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\uTorrent 2014-04-03 11:06 - 2014-04-03 11:06 - 00029266 _____ () C:\Users\tompe\Desktop\Addition.txt 2014-04-03 09:51 - 2014-04-07 01:25 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-07 01:25 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-07 01:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-02 14:38 - 2014-04-02 14:38 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-04-02 14:38 - 2014-04-02 14:38 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Apple Computer 2014-04-02 14:38 - 2014-04-02 14:38 - 00000000 ____D () C:\Users\tompe\AppData\Local\Apple Computer 2014-04-02 14:38 - 2014-04-02 14:37 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files\iTunes 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files\iPod 2014-04-02 14:37 - 2014-04-02 14:37 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Users\tompe\AppData\Local\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\ProgramData\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files\Bonjour 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-04-02 14:36 - 2014-04-02 14:36 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-03-28 01:30 - 2014-01-31 16:07 - 00000000 ____D () C:\ProgramData\YTAdRemeoval 2014-03-27 13:42 - 2014-03-27 13:42 - 00001001 _____ () C:\Users\tompe\Desktop\Dropbox.lnk 2014-03-27 13:42 - 2014-03-27 13:42 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\DropboxMaster 2014-03-27 13:42 - 2013-12-20 18:20 - 00000000 ____D () C:\Users\tompe 2014-03-27 13:41 - 2014-03-27 13:41 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-03-25 18:19 - 2014-03-25 18:19 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\dvdcss 2014-03-25 18:19 - 2014-03-25 18:09 - 00000000 ____D () C:\Users\tompe\AppData\Roaming\DAEMON Tools Lite 2014-03-25 18:18 - 2014-03-25 18:18 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images 2014-03-25 18:18 - 2014-03-25 18:08 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-25 18:09 - 2014-03-25 18:09 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-25 18:09 - 2014-03-25 18:09 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-25 17:48 - 2014-03-25 17:46 - 00000000 ____D () C:\Users\tompe\Documents\My ISO Files 2014-03-21 11:10 - 2014-01-19 19:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-03-20 12:30 - 2014-02-17 16:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-17 22:25 - 2014-03-17 22:25 - 00001809 _____ () C:\Users\tompe\Desktop\Downloads.lnk Some content of TEMP: ==================== C:\Users\tompe\AppData\Local\Temp\avgnt.exe C:\Users\tompe\AppData\Local\Temp\down.4492.OptimizerProInstaller.exe C:\Users\tompe\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_rmka7.dll C:\Users\tompe\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\tompe\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\tompe\AppData\Local\Temp\Quarantine.exe C:\Users\tompe\AppData\Local\Temp\Tsu4756F7EA.dll C:\Users\tompe\AppData\Local\Temp\vlc-2.1.3-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-30 17:39 ==================== End Of Log ============================ --- --- --- --- --- --- also aktuell habe ich nun keine probleme mehr. vielen dank für die hilfe. ist wirklich großartig, was ihr hier für arbeit leistet. hat mir sehr geholfen. gru |
| Themen zu Windows 7 Pro 64 - Werbung wird im Firefox und auch Chrome eingeblendet |
| ahnung, chrome, eingeblendet, keine ahnung, maus, plötzlich, praktisch, pup.optional.multiplug, pup.optional.multiplug.a, pup.optional.opencandy, rechte, rechten, tagen, unterstrichen, windows, windows 7, wörter unterstrichen |
Baum-Darstellung