![]() |
|
Plagegeister aller Art und deren Bekämpfung: Pup Optional und dwm notificationWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #9 |
![]() ![]() | ![]() Pup Optional und dwm notificationCode:
ATTFilter # AdwCleaner v3.023 - Bericht erstellt am 15/04/2014 um 09:50:38 # Aktualisiert 01/04/2014 von Xplode # Betriebssystem : Windows 8 (64 bits) # Benutzername : # Gestartet von : C:\Users\lulu\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : NewPlayerUpdaterService ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\lulu\AppData\Local\Tuguu_SL Ordner Gelöscht : C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\Extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com Ordner Gelöscht : C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\Extensions\quick_start@gmail.com ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16537 -\\ Mozilla Firefox v23.0.1 (de) [ Datei : C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\prefs.js ] [ Datei : C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\prefs.js ] [ Datei : C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\prefs.js ] -\\ Google Chrome v34.0.1847.116 [ Datei : C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\preferences ] [ Datei : C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [2252 octets] - [15/04/2014 09:49:51] AdwCleaner[S0].txt - [1517 octets] - [15/04/2014 09:50:38] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1577 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 8 x64 Ran on 15.04.2014 at 9:58:14,28 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 15.04.2014 at 10:07:22,47 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-04-2014 Ranon 15-04-2014 10:10:57 Running from C:\Users\lulu\Downloads Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Spotify Ltd) C:\Users\lulu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe (BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe () C:\Program Files\Sony\VAIO Care\listener.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\lulu\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-09-28] (Realtek Semiconductor) HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-11-05] (Qualcomm Atheros) HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-11-05] (Atheros Communications) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-10-23] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-22] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation) HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [185896 2013-10-28] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-15] (AVAST Software) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-1135051811-991919262-1634789686-1001\...\Run: [Spotify] => C:\Users\lulu\AppData\Roaming\Spotify\spotify.exe [6087224 2014-04-13] (Spotify Ltd) HKU\S-1-5-21-1135051811-991919262-1634789686-1001\...\Run: [Spotify Web Helper] => C:\Users\lulu\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-13] (Spotify Ltd) HKU\S-1-5-21-1135051811-991919262-1634789686-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [759384 2013-07-08] (Sandboxie Holdings, LLC) HKU\S-1-5-21-1135051811-991919262-1634789686-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20473504 2013-10-02] (Skype Technologies S.A.) HKU\S-1-5-21-1135051811-991919262-1634789686-1001\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [456768 2013-10-19] (BillP Studios) Startup: C:\Users\lulu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - URL hxxp://search.conduit.com/Results.aspx?ctid=CT3322287&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPC86DED40-3480-449D-A55D-E90A87121C7A&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKCU - {16727879-BEF8-421A-944A-C14CFB80BEB9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS SearchScopes: HKCU - {70026B5F-02EA-490F-A80B-2042D4E1AE6F} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {A236D83C-2C6E-4DA1-867B-702412B2964C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q113&_nkw={searchTerms} BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default FF NewTab: about:newtab FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\lulu\AppData\Roaming\Mozilla\Firefox\Profiles\7eaxiflz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-03] Chrome: ======= CHR Extension: (Docs) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-21] CHR Extension: (Google Drive) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-21] CHR Extension: (YouTube) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-21] CHR Extension: (Google-Suche) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-21] CHR Extension: (Google Wallet) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31] CHR Extension: (Google Mail) - C:\Users\lulu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-21] ==================== Services (Whitelisted) ================= S2 0283551397484059mcinstcleanup; C:\Users\lulu\AppData\Local\Temp\028355~1.EXE [833616 2013-01-30] (McAfee, Inc.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231040 2012-11-05] (Qualcomm Atheros Commnucations) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-15] (AVAST Software) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-09-29] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-09-29] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-10-18] (Sony Corporation) R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [964608 2012-09-28] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1265824 2012-10-23] (Sony Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-11-05] (Atheros) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-10-20] (Microsoft Corporation) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-15] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-15] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-15] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-15] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-15] () R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-10-23] (Advanced Micro Devices) R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-11-05] (Qualcomm Atheros) R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-11-05] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-23] (Synaptics Incorporated) R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-15 10:10 - 2014-04-15 10:10 - 02054144 _____ (Farbar) C:\Users\lulu\Downloads\FRST64 (1).exe 2014-04-15 10:07 - 2014-04-15 10:07 - 00000612 _____ () C:\Users\lulu\Desktop\JRT.txt 2014-04-15 09:57 - 2014-04-15 09:57 - 01016261 _____ (Thisisu) C:\Users\lulu\Downloads\JRT.exe 2014-04-15 09:57 - 2014-04-15 09:57 - 00001657 _____ () C:\Users\lulu\Desktop\AdwCleaner[S0].txt 2014-04-15 09:49 - 2014-04-15 09:50 - 00000000 ____D () C:\AdwCleaner 2014-04-15 09:49 - 2014-04-15 09:49 - 01426178 _____ () C:\Users\lulu\Downloads\adwcleaner.exe 2014-04-15 09:33 - 2014-04-15 09:33 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-15 09:33 - 2014-04-15 09:33 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-14 16:01 - 2014-04-14 16:01 - 03218352 _____ (McAfee, Inc.) C:\Users\lulu\Downloads\MCPR.exe 2014-04-14 15:48 - 2014-04-14 15:48 - 00000000 ____D () C:\Users\lulu\AppData\Local\Citrix 2014-04-14 15:48 - 2014-04-14 15:48 - 00000000 ____D () C:\Program Files (x86)\Citrix 2014-04-14 14:51 - 2014-04-14 14:52 - 03218352 _____ (McAfee, Inc.) C:\Users\lulu\Downloads\MCPR68.exe 2014-04-14 11:27 - 2014-04-15 10:10 - 00018763 _____ () C:\Users\lulu\Downloads\FRST.txt 2014-04-14 11:27 - 2014-04-14 11:28 - 00045455 _____ () C:\Users\lulu\Downloads\Addition.txt 2014-04-14 11:26 - 2014-04-15 10:10 - 00000000 ____D () C:\FRST 2014-04-14 11:15 - 2014-04-14 11:15 - 02157568 _____ (Farbar) C:\Users\lulu\Downloads\FRST64.exe 2014-04-13 17:03 - 2014-04-13 17:03 - 01066024 _____ (BillP Studios) C:\Users\lulu\Downloads\wpsetup (1).exe 2014-04-12 20:31 - 2014-03-07 02:48 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-12 20:31 - 2014-03-07 02:47 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-12 20:31 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-12 20:31 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-12 20:31 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-12 20:31 - 2014-01-31 05:55 - 00209712 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe 2014-04-12 20:31 - 2014-01-31 02:48 - 00564736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-04-12 20:31 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2014-04-12 20:31 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2014-04-12 20:31 - 2014-01-31 02:48 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-04-12 20:31 - 2014-01-31 02:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-04-12 20:31 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-04-12 20:31 - 2014-01-31 02:06 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-04-12 20:31 - 2014-01-27 05:42 - 02232664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-04-12 20:31 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-12 20:31 - 2014-01-27 02:52 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-04-12 20:31 - 2014-01-27 02:31 - 19752448 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-04-12 20:31 - 2014-01-27 01:17 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml 2014-04-12 20:31 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-04-12 20:31 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-04-12 20:31 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-04-12 20:31 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-04-12 20:31 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-04-12 20:31 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-04-12 20:31 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-12 20:31 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-12 20:31 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-04-12 20:31 - 2012-07-26 05:06 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-12 20:30 - 2014-03-07 02:48 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-12 20:30 - 2014-03-07 02:47 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-12 20:30 - 2014-03-07 02:47 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-12 20:30 - 2014-03-07 02:47 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-12 20:30 - 2014-03-07 02:47 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-12 20:30 - 2014-03-07 02:47 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-12 20:30 - 2014-03-07 02:08 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-12 20:30 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-04-12 20:30 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-12 20:30 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-12 20:30 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-12 20:30 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-12 20:30 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-12 20:30 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-12 20:30 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-12 20:30 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-12 01:00 - 2014-02-06 01:41 - 01257984 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-12 01:00 - 2014-02-06 01:41 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-04-12 01:00 - 2014-02-06 01:26 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-04-12 01:00 - 2014-02-06 01:19 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-12 00:25 - 2014-04-12 00:25 - 00447840 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Users\lulu\Documents\OneNote Notebooks 2014-03-25 13:53 - 2014-03-25 13:53 - 00000115 _____ () C:\Users\lulu\Downloads\ATT00001.txt 2014-03-22 00:51 - 2014-03-22 00:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-03-18 00:59 - 2014-03-18 00:59 - 00000000 ____D () C:\Users\lulu\Documents\DVDVideoSoft 2014-03-17 23:32 - 2014-03-17 23:32 - 00001199 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-03-17 23:26 - 2014-03-17 23:34 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-03-17 23:23 - 2014-03-17 23:24 - 91109888 _____ (DVDVideoSoft Ltd. ) C:\Users\lulu\Downloads\FreeStudio_6.2.13.304.exe 2014-03-17 23:19 - 2014-03-17 23:19 - 06658791 _____ () C:\Users\lulu\Desktop\waveshop-1.0.14.001-portable-x86-x64.zip 2014-03-17 23:17 - 2014-03-17 23:17 - 00300850 _____ () C:\Users\lulu\Downloads\mp3DC219 (1).exe 2014-03-17 23:16 - 2014-03-17 23:16 - 00300850 _____ () C:\Users\lulu\Desktop\mp3DC219.exe 2014-03-17 23:02 - 2014-03-17 23:02 - 00930952 _____ (CNET Download.com) C:\Users\lulu\Downloads\cbsidlm-cbsi183-3GP_to_MP3_Converter-ORG-10969186.exe ==================== One Month Modified Files and Folders ======= 2014-04-15 10:11 - 2014-04-14 11:27 - 00018763 _____ () C:\Users\lulu\Downloads\FRST.txt 2014-04-15 10:10 - 2014-04-15 10:10 - 02054144 _____ (Farbar) C:\Users\lulu\Downloads\FRST64 (1).exe 2014-04-15 10:10 - 2014-04-14 11:26 - 00000000 ____D () C:\FRST 2014-04-15 10:07 - 2014-04-15 10:07 - 00000612 _____ () C:\Users\lulu\Desktop\JRT.txt 2014-04-15 09:59 - 2013-07-08 15:31 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-15 09:57 - 2014-04-15 09:57 - 01016261 _____ (Thisisu) C:\Users\lulu\Downloads\JRT.exe 2014-04-15 09:57 - 2014-04-15 09:57 - 00001657 _____ () C:\Users\lulu\Desktop\AdwCleaner[S0].txt 2014-04-15 09:57 - 2013-01-22 00:15 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-04-15 09:57 - 2013-01-22 00:15 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-04-15 09:57 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-15 09:54 - 2013-08-03 00:10 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-15 09:52 - 2012-08-03 04:22 - 00200432 _____ () C:\Windows\PFRO.log 2014-04-15 09:52 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-15 09:51 - 2013-01-22 00:41 - 01543648 _____ () C:\Windows\WindowsUpdate.log 2014-04-15 09:51 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-04-15 09:50 - 2014-04-15 09:49 - 00000000 ____D () C:\AdwCleaner 2014-04-15 09:49 - 2014-04-15 09:49 - 01426178 _____ () C:\Users\lulu\Downloads\adwcleaner.exe 2014-04-15 09:42 - 2013-08-03 00:10 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-15 09:34 - 2013-08-03 00:10 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-15 09:33 - 2014-04-15 09:33 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-15 09:33 - 2014-04-15 09:33 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-15 09:33 - 2013-08-03 00:10 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-15 09:33 - 2013-08-03 00:10 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-15 09:33 - 2013-08-03 00:10 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-15 09:33 - 2013-08-03 00:10 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-15 09:33 - 2013-08-03 00:10 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-15 09:33 - 2013-08-03 00:09 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-15 09:33 - 2013-08-03 00:09 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-15 09:33 - 2013-08-03 00:09 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-04-14 22:59 - 2013-12-08 16:49 - 00000000 ____D () C:\Users\lulu\Desktop\FEP WS 2013.14 2014-04-14 17:11 - 2013-07-07 21:51 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1135051811-991919262-1634789686-1001 2014-04-14 16:44 - 2013-07-07 21:40 - 00000000 ____D () C:\Users\lulu\AppData\Local\Packages 2014-04-14 16:44 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-04-14 16:02 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-04-14 16:01 - 2014-04-14 16:01 - 03218352 _____ (McAfee, Inc.) C:\Users\lulu\Downloads\MCPR.exe 2014-04-14 15:48 - 2014-04-14 15:48 - 00000000 ____D () C:\Users\lulu\AppData\Local\Citrix 2014-04-14 15:48 - 2014-04-14 15:48 - 00000000 ____D () C:\Program Files (x86)\Citrix 2014-04-14 14:52 - 2014-04-14 14:51 - 03218352 _____ (McAfee, Inc.) C:\Users\lulu\Downloads\MCPR68.exe 2014-04-14 13:26 - 2013-07-07 22:12 - 00000000 ____D () C:\Users\lulu\AppData\Local\CrashDumps 2014-04-14 11:28 - 2014-04-14 11:27 - 00045455 _____ () C:\Users\lulu\Downloads\Addition.txt 2014-04-14 11:15 - 2014-04-14 11:15 - 02157568 _____ (Farbar) C:\Users\lulu\Downloads\FRST64.exe 2014-04-13 22:58 - 2013-07-07 23:05 - 00000000 ____D () C:\Users\lulu\AppData\Roaming\Spotify 2014-04-13 17:04 - 2013-10-27 21:48 - 00000000 ____D () C:\ProgramData\InstallMate 2014-04-13 17:03 - 2014-04-13 17:03 - 01066024 _____ (BillP Studios) C:\Users\lulu\Downloads\wpsetup (1).exe 2014-04-13 11:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-04-13 11:22 - 2013-07-07 23:05 - 00000000 ____D () C:\Users\lulu\AppData\Local\Spotify 2014-04-13 11:01 - 2013-07-07 21:43 - 00000000 ___RD () C:\Users\lulu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-13 11:01 - 2013-07-07 21:43 - 00000000 ___RD () C:\Users\lulu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-13 10:55 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-04-13 10:47 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData 2014-04-13 10:47 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore 2014-04-12 13:25 - 2013-07-08 00:30 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-12 13:21 - 2013-08-15 09:01 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-12 13:17 - 2013-07-08 09:49 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-12 00:25 - 2014-04-12 00:25 - 00447840 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-11 13:46 - 2013-08-03 00:11 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-08 20:11 - 2013-07-08 20:31 - 00000000 ____D () C:\Users\lulu\Documents\Bewerbungen 2014-04-05 13:35 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\lulu\AppData\Local\Windows Live 2014-04-03 17:02 - 2012-07-26 09:21 - 00026390 _____ () C:\Windows\setupact.log 2014-04-02 13:37 - 2013-08-03 00:10 - 00004096 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-04-02 13:37 - 2013-08-03 00:10 - 00003860 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-03-31 23:18 - 2013-11-15 23:16 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-31 23:18 - 2013-11-15 23:16 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Users\lulu\Documents\OneNote Notebooks 2014-03-31 20:17 - 2014-02-23 00:47 - 00000000 ____D () C:\Users\lulu\Desktop\Fachpraktikum GE WS 2013.14 2014-03-31 20:16 - 2013-07-08 20:31 - 00000000 ____D () C:\Users\lulu\Documents\UNI 2014-03-27 00:30 - 2013-07-08 20:31 - 00000000 ____D () C:\Users\lulu\Documents\alles 2014-03-25 13:53 - 2014-03-25 13:53 - 00000115 _____ () C:\Users\lulu\Downloads\ATT00001.txt 2014-03-25 08:45 - 2013-07-07 21:44 - 00000000 ____D () C:\Users\lulu\AppData\Roaming\Atheros 2014-03-24 12:14 - 2013-07-07 21:44 - 00000000 ____D () C:\Users\lulu\Documents\Bluetooth Folder 2014-03-22 01:17 - 2013-08-15 22:29 - 00000000 ____D () C:\Users\lulu\AppData\Roaming\vlc 2014-03-22 00:51 - 2014-03-22 00:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-03-18 00:59 - 2014-03-18 00:59 - 00000000 ____D () C:\Users\lulu\Documents\DVDVideoSoft 2014-03-17 23:35 - 2014-03-10 11:51 - 00000000 ____D () C:\Users\lulu\AppData\Roaming\DVDVideoSoft 2014-03-17 23:34 - 2014-03-17 23:26 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-03-17 23:32 - 2014-03-17 23:32 - 00001199 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-03-17 23:24 - 2014-03-17 23:23 - 91109888 _____ (DVDVideoSoft Ltd. ) C:\Users\lulu\Downloads\FreeStudio_6.2.13.304.exe 2014-03-17 23:19 - 2014-03-17 23:19 - 06658791 _____ () C:\Users\lulu\Desktop\waveshop-1.0.14.001-portable-x86-x64.zip 2014-03-17 23:17 - 2014-03-17 23:17 - 00300850 _____ () C:\Users\lulu\Downloads\mp3DC219 (1).exe 2014-03-17 23:16 - 2014-03-17 23:16 - 00300850 _____ () C:\Users\lulu\Desktop\mp3DC219.exe 2014-03-17 23:02 - 2014-03-17 23:02 - 00930952 _____ (CNET Download.com) C:\Users\lulu\Downloads\cbsidlm-cbsi183-3GP_to_MP3_Converter-ORG-10969186.exe 2014-03-17 09:41 - 2013-08-02 23:53 - 00001276 _____ () C:\DelFix.txt Some content of TEMP: ==================== C:\Users\lulu\AppData\Local\temp\0283551397484059mcinst.exe C:\Users\lulu\AppData\Local\temp\BackupSetup.exe C:\Users\lulu\AppData\Local\temp\ICReinstall_ZipExtractorSetup.exe C:\Users\lulu\AppData\Local\temp\Quarantine.exe C:\Users\lulu\AppData\Local\temp\vcredist_x64.exe C:\Users\lulu\AppData\Local\temp\vlc-2.1.3-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-08 20:23 ==================== End Of Log ============================ --- --- --- |
Themen zu Pup Optional und dwm notification |
abgebrochen, anti-malware, appdata, automatischer download, autostart, awesomehp, awesomehp entfernen, bildschirm schwarz, code, download, explorer, google, icon, internetseite, klick, malwarebytes, namen, neustarten, pup.optional.quickstart.a, runterfahren, seite, software, speicher, taskleiste |