![]() |
|
Plagegeister aller Art und deren Bekämpfung: AddOn 'RemoveTheAdApp' auf Chrome lässt sich nicht LöschenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
| ![]() AddOn 'RemoveTheAdApp' auf Chrome lässt sich nicht Löschen FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014 Ran by Chrisi (administrator) on CHRISIS-PC on 02-05-2014 10:14:19 Running from C:\Users\Chrisi\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe (Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (ASUS) C:\Windows\AsScrPro.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (CyberLink) C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (PC Drivers Headquarters) C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACESWD.EXE (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (Boingo Wireless, Inc.) C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe () C:\Program Files (x86)\AVG Secure Search\vprot.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC.) HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] () HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Boingo Wi-Fi] => C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-11] () HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-04] (ASUS) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.) HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2557976 2014-04-28] () HKU\.DEFAULT\...\RunOnce: [Del847210838] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" HKU\.DEFAULT\...\RunOnce: [Del1020404068] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" HKU\.DEFAULT\...\RunOnce: [Del1285189931] - cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [GoogleChromeAutoLaunch_6D9C14969CF754B6DCD021D8861E9586] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.) HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [Driver Whiz] => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3976560 2013-09-19] (PC Drivers Headquarters) HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59240 2012-02-23] (Apple Inc.) HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\RunOnce: [Application Restart #3] - C:\Users\Chrisi\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Chrisi\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session HKU\S-1-5-21-3918741511-1222942072-1058904510-1001\...\MountPoints2: G - G:\MMMTest.EXE AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355552 2014-04-08] (Conduit) AppInit_DLLs: C:\PROGRA~3\NETWOR~1\NETWOR~2.DLL => C:\ProgramData\Network Acceleration\NetworkAcceleration_x64.dll [4358656 2014-02-03] () AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-04-08] (Conduit) AppInit_DLLs-x32: c:\progra~3\networ~1\networ~1.dll => C:\ProgramData\Network Acceleration\NetworkAcceleration.dll [4116480 2014-02-03] () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?affID=121562&tt=gc_&babsrc=HP_ss_Btisdt7&mntrId=40294E5D60632631 HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=MSE&Tid=000314D3&OHP=http%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3319434%26octid%3DEB%5FORIGINAL%5FCTID%26SearchSource%3D55%26CUI%3D%26UM%3D2%26UP%3DSP1183616C%2D3615%2D4502%2DBFC7%2D122F9CE89029%26SSPV%3D&OSP=http%3A%2F%2Fsearch.conduit.com%2FResults.aspx%3Fctid%3DCT3319434%26octid%3DEB%5FORIGINAL%5FCTID%26SearchSource%3D58%26CUI%3D%26UM%3D2%26UP%3DSP1183616C%2D3615%2D4502%2DBFC7%2D122F9CE89029%26q%3D%7BsearchTerms%7D%26SSPV%3D HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.qone8.com/?type=hp&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://start.qone8.com/?type=sc&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1381948425&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA&q={searchTerms} SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM-x32 - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=AT&userid=dfda36b3-7fc5-4fd6-a277-771a581e08cb&searchtype=ds&q={searchTerms}&installDate=25/04/2013 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1381948425&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA&q={searchTerms} SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10039&barid={8372C22A-B61F-11E2-B4A5-20CF30D3113A} SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&q={searchTerms}&SSPV= SearchScopes: HKCU - URL hxxp://www.searchgol.com/?q={searchTerms}&affID=121562&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=40294E5D60632631 SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&q={searchTerms}&SSPV= SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&loc=skw&search={searchTerms} BHO: SuruF anod Keep - {117F0D8D-4250-3DF8-37F0-E5120DC138B5} - C:\Program Files (x86)\SuruF anod Keep\f3EpFOPD.x64.dll () BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Surf anD keeep - {5FCA52F6-7842-BC50-D29E-CCFE7549E48A} - C:\Program Files (x86)\Surf anD keeep\DNO8QHTu_U.x64.dll () BHO: surf and akeep - {62101AA5-681D-8123-349F-C230A41CD2A1} - C:\Program Files (x86)\surf and akeep\5WXF.x64.dll () BHO: SSearchh-NewTab - {90987232-7C83-B008-3486-FA7AE9307E95} - C:\Program Files (x86)\SSearchh-NewTab\e.x64.dll () BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: SeAirch-NewaTaB - {BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39} - C:\Program Files (x86)\SeAirch-NewaTaB\1.x64.dll () BHO: SSearrch-NewTab - {EE572254-BA25-42BF-DE0F-DB01553CE121} - C:\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.x64.dll () BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO: CeheapMee - {FEE29BFB-6C53-D842-0E75-ACB9B660DBC6} - C:\ProgramData\CeheapMee\YJC3N8RbIH.x64.dll () BHO-x32: SuruF anod Keep - {117F0D8D-4250-3DF8-37F0-E5120DC138B5} - C:\Program Files (x86)\SuruF anod Keep\f3EpFOPD.dll () BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Surf anD keeep - {5FCA52F6-7842-BC50-D29E-CCFE7549E48A} - C:\Program Files (x86)\Surf anD keeep\DNO8QHTu_U.dll () BHO-x32: surf and akeep - {62101AA5-681D-8123-349F-C230A41CD2A1} - C:\Program Files (x86)\surf and akeep\5WXF.dll () BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: SSearchh-NewTab - {90987232-7C83-B008-3486-FA7AE9307E95} - C:\Program Files (x86)\SSearchh-NewTab\e.dll () BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SeAirch-NewaTaB - {BDEDDC06-953F-8DAE-9A8E-9F7E35B5BF39} - C:\Program Files (x86)\SeAirch-NewaTaB\1.dll () BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: SSearrch-NewTab - {EE572254-BA25-42BF-DE0F-DB01553CE121} - C:\Program Files (x86)\SSearrch-NewTab\RUdUY_Pt.dll () BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) BHO-x32: CeheapMee - {FEE29BFB-6C53-D842-0E75-ACB9B660DBC6} - C:\ProgramData\CeheapMee\YJC3N8RbIH.dll () Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {1ACC87D6-CB2B-4CAF-9280-6549842407C9} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 213.33.99.70 80.120.17.70 FireFox: ======== FF ProfilePath: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default FF user.js: detected! => C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\user.js FF NetworkProxy: "type", 0 FF Homepage: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw FF SelectedSearchEngine: MyStart Search FF NewTab: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw FF DefaultSearchEngine: MyStart Search FF Keyword.URL: hxxp://mystart.incredibar.com/?a=6R92s0Z1Fz&i=26&loc=skw&search= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll No File FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll (mozilla.org) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\ividi.xml FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\MyStart Search.xml FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\SweetIM Search.xml FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\Web Search.xml FF SearchPlugin: C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\searchplugins\WebSearch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qone8.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: Plasmoo Search Engine - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\engine@plasmoo.com [2011-04-27] FF Extension: Babylon - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\ffxtlbr@babylon.com [2012-01-16] FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\staged [2012-09-29] FF Extension: DVDVideoSoftTB Toolbar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011-01-20] FF Extension: Playboost Gamebar - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{A79D8B60-1FF0-47F0-8E79-8CDE1FECB0FD} [2011-05-22] FF Extension: Free YouTube Download (Free Studio) Menu - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2013-06-03] FF Extension: DealPly - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-01-16] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [2013-11-08] FF HKLM-x32\...\Firefox\Extensions: [OKitSpace@OKitSpace.es] - C:\Windows\system32\config\systemprofile\AppData\Roaming\okitSpace\Firefox FF HKLM-x32\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKLM-x32\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [iy.3u@eyvyxiayou.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [e_ed@jlbulxy.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [5otii.7eioe@oarduxrsydmioy.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [bxorueo-5euo@eyoa-gsdyo.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [rbsx-oojv@acpwzz.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [uuao.hfi@e-ytsa.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [ift@hfzfav.net] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [xwdscxp-8@rbpuaadzvnfx.org] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF HKCU\...\Firefox\Extensions: [o7-2zuhqa@j-upoovpj.co.uk] - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions FF Extension: No Name - C:\Users\Chrisi\AppData\Roaming\Mozilla\Firefox\Profiles\szadmrfv.default\extensions [2011-01-06] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://start.qone8.com/?type=sc&ts=1381935075&from=adks&uid=ST9500325AS_5VEEBXRAXXXX5VEEBXRA Chrome: ======= CHR HomePage: hxxp://websearch.pur-esult.info/?pid=724&r=2013/11/21&hid=9656713791445713896&lg=EN&cc=AT CHR StartupUrls: "hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP1183616C-3615-4502-BFC7-122F9CE89029&SSPV=", "hxxp://search.gboxapp.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll (AVG Technologies) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Unity Player) - C:\Users\Chrisi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File CHR Extension: (Extended Protection) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2013-10-16] CHR Extension: (RemoveTheAdApp) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfpnamnoijjcejdohcdjkbbkjcfpind [2014-02-13] CHR Extension: (Google Wallet) - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24] CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2011-12-19] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-05-28] CHR HKLM-x32\...\Chrome\Extension: [cekcjpgehmohobmdiikfnopibipmgnml] - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ [2013-05-28] CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2011-12-19] CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-10-16] CHR HKLM-x32\...\Chrome\Extension: [lbidgdoiglndbjlcnnifemecdhnpeabo] - C:\Users\Chrisi\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx [2013-10-16] CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx [2014-04-28] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 2384af53; C:\ProgramData\Network Acceleration\NetworkAccelerationSvc.dll [179536 2014-02-03] () R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2470688 2014-04-08] (Conduit) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] () R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software) R2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search) ==================== Drivers (Whitelisted) ==================== R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies) S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-07] () S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany) S1 gkduysrp; \??\C:\Windows\system32\drivers\gkduysrp.sys [X] U3 tmlwf; U3 tmwfp; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-02 10:13 - 2014-05-02 10:14 - 00046225 _____ () C:\Users\Chrisi\Desktop\Addition.txt 2014-05-02 10:12 - 2014-05-02 10:14 - 00037982 _____ () C:\Users\Chrisi\Desktop\FRST.txt 2014-05-02 10:12 - 2014-05-02 10:14 - 00000000 ____D () C:\FRST 2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe 2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp 2014-04-29 07:50 - 2014-04-29 11:34 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx 2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp 2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search 2014-04-23 09:24 - 2014-04-23 09:24 - 00000000 ____D () C:\ProgramData\CeheapMee 2014-04-22 21:48 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-22 21:48 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-22 21:48 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 21:48 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-22 21:48 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 21:48 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 21:48 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 21:48 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 21:48 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 21:48 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 21:48 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-22 21:48 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 21:48 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 21:48 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 21:48 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 21:48 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 21:48 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 21:48 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 21:48 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 21:48 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 21:48 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 21:48 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 21:48 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 21:48 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 21:48 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 21:48 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 21:48 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 21:48 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 21:48 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 21:48 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 21:48 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 21:48 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 21:48 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 21:48 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 21:48 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 21:48 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 21:48 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 21:48 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 21:48 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 21:48 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 21:48 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 21:48 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 21:48 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 21:48 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 21:48 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 21:48 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 21:48 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 21:48 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-22 20:04 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-22 20:04 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-22 20:04 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-22 20:04 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-22 20:04 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-22 20:04 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-22 20:04 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-22 20:04 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-22 20:04 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-22 20:04 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-22 20:04 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-22 20:04 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-22 20:04 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-22 20:04 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-22 20:04 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-22 20:04 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-22 20:04 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp 2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp 2014-04-05 13:13 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-04-05 13:13 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-04-05 13:13 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-04-05 13:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-04-05 13:11 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-04-05 13:11 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-04-05 13:10 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-04-05 13:10 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll ==================== One Month Modified Files and Folders ======= 2014-05-02 10:14 - 2014-05-02 10:13 - 00046225 _____ () C:\Users\Chrisi\Desktop\Addition.txt 2014-05-02 10:14 - 2014-05-02 10:12 - 00037982 _____ () C:\Users\Chrisi\Desktop\FRST.txt 2014-05-02 10:14 - 2014-05-02 10:12 - 00000000 ____D () C:\FRST 2014-05-02 10:11 - 2014-05-02 10:11 - 02062336 _____ (Farbar) C:\Users\Chrisi\Desktop\FRST64.exe 2014-05-02 09:50 - 2013-05-13 11:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job 2014-05-02 09:31 - 2010-11-11 05:41 - 01773528 _____ () C:\Windows\WindowsUpdate.log 2014-05-02 09:21 - 2012-06-11 22:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-02 09:19 - 2012-01-16 20:48 - 00000000 ____D () C:\Program Files (x86)\DealPly 2014-05-02 09:18 - 2010-11-11 06:10 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-30 06:58 - 2009-08-04 11:51 - 00704972 _____ () C:\Windows\system32\perfh007.dat 2014-04-30 06:58 - 2009-08-04 11:51 - 00152520 _____ () C:\Windows\system32\perfc007.dat 2014-04-30 06:58 - 2009-07-14 07:13 - 01635912 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-30 06:44 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-30 06:44 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-30 06:38 - 2013-05-01 17:14 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup 2014-04-30 06:35 - 2013-06-03 09:33 - 00000342 _____ () C:\Windows\Tasks\dsmonitor.job 2014-04-30 06:35 - 2010-11-11 06:40 - 00000000 ____D () C:\Program Files\P4G 2014-04-30 06:34 - 2014-04-30 06:34 - 00276128 _____ () C:\Windows\Minidump\043014-76159-01.dmp 2014-04-30 06:34 - 2011-08-28 15:44 - 00000000 ____D () C:\Windows\Minidump 2014-04-30 06:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-30 06:34 - 2009-07-14 06:51 - 00081128 _____ () C:\Windows\setupact.log 2014-04-29 18:21 - 2012-06-11 22:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-29 18:21 - 2012-06-11 22:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-29 18:21 - 2011-06-25 17:49 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-29 11:46 - 2013-06-28 06:33 - 00000000 ____D () C:\Users\Chrisi\AppData\Local\AVG Secure Search 2014-04-29 11:34 - 2014-04-29 07:50 - 22004221 _____ () C:\Users\Chrisi\Documents\Böden in der Tierhaltuhng.pptx 2014-04-28 20:26 - 2010-11-11 06:42 - 00001615 _____ () C:\Windows\system32\ServiceFilter.ini 2014-04-28 17:44 - 2014-04-28 17:44 - 00276128 _____ () C:\Windows\Minidump\042814-43789-01.dmp 2014-04-28 16:41 - 2014-04-28 16:41 - 00000000 ____D () C:\ProgramData\AVG Secure Search 2014-04-28 16:40 - 2013-06-28 06:33 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys 2014-04-28 16:40 - 2013-06-28 06:33 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search 2014-04-25 22:14 - 2011-05-03 15:16 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-04-25 14:24 - 2013-03-21 19:21 - 00000000 ____D () C:\Windows\rescache 2014-04-23 12:39 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-23 09:24 - 2014-04-23 09:24 - 00000000 ____D () C:\ProgramData\CeheapMee 2014-04-23 09:24 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\2f628f5734a24aae 2014-04-23 09:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-22 21:50 - 2010-12-25 11:51 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-22 21:47 - 2013-08-15 23:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-22 21:43 - 2011-08-07 17:24 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-22 20:18 - 2013-11-21 11:55 - 00000000 ____D () C:\ProgramData\SearCH-NewTaB 2014-04-22 20:18 - 2013-11-21 11:54 - 00000000 ____D () C:\ProgramData\sUrf and Keeapp 2014-04-22 20:18 - 2013-11-21 11:22 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker 2014-04-22 20:18 - 2010-11-11 06:28 - 00283492 _____ () C:\Windows\PFRO.log 2014-04-22 20:07 - 2010-11-11 06:43 - 00000000 ____D () C:\Windows\SysWOW64\K_Series_ScreenSaver_EN dir 2014-04-22 20:01 - 2013-11-21 11:55 - 00000000 ____D () C:\Program Files (x86)\SearCH-NewTaB 2014-04-22 20:01 - 2013-11-21 11:54 - 00000000 ____D () C:\Program Files (x86)\sUrf and Keeapp 2014-04-22 20:00 - 2013-11-21 11:22 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker 2014-04-22 19:58 - 2013-11-08 20:59 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\BitTorrent 2014-04-22 19:58 - 2013-11-08 20:29 - 00000000 ____D () C:\Program Files (x86)\LimeWire 2014-04-22 19:56 - 2013-11-09 19:29 - 00000000 ____D () C:\ProgramData\eMule 2014-04-22 19:40 - 2014-04-22 19:40 - 00000000 ____D () C:\Program Files (x86)\RemoveTheAdApp 2014-04-22 19:40 - 2014-02-13 10:10 - 00000000 ____D () C:\ProgramData\RemoveTheAdApp 2014-04-22 19:39 - 2014-01-17 15:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2014-04-08 19:42 - 2009-07-14 06:45 - 00513160 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-08 19:13 - 2010-12-25 09:17 - 01610192 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-04-08 19:11 - 2013-11-08 20:28 - 00000000 ____D () C:\Users\Chrisi\AppData\Roaming\okitspace 2014-04-08 19:10 - 2010-12-25 12:01 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-04-08 19:09 - 2010-12-25 11:57 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-04-08 19:08 - 2010-12-25 11:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-04-06 12:24 - 2011-01-07 15:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll 2014-04-06 12:24 - 2011-01-07 15:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2014-04-05 15:35 - 2014-04-05 15:35 - 00276072 _____ () C:\Windows\Minidump\040514-189962-01.dmp 2014-04-05 15:32 - 2013-03-15 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-04-05 15:32 - 2010-12-24 18:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-04-05 15:25 - 2010-12-25 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight Files to move or delete: ==================== C:\Users\Chrisi\wlsetup-web.exe Some content of TEMP: ==================== C:\Users\Chrisi\AppData\Local\Temp\32393-671455-limewire.exe C:\Users\Chrisi\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe C:\Users\Chrisi\AppData\Local\Temp\Ainstde.exe C:\Users\Chrisi\AppData\Local\Temp\AMPing.exe C:\Users\Chrisi\AppData\Local\Temp\AskSLib.dll C:\Users\Chrisi\AppData\Local\Temp\atl80.dll C:\Users\Chrisi\AppData\Local\Temp\AutoRun.exe C:\Users\Chrisi\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Chrisi\AppData\Local\Temp\biclient.exe C:\Users\Chrisi\AppData\Local\Temp\bitool.dll C:\Users\Chrisi\AppData\Local\Temp\bi_cleaner.exe C:\Users\Chrisi\AppData\Local\Temp\bundlesweetimsetup.exe C:\Users\Chrisi\AppData\Local\Temp\drm_dyndata_7380011.dll C:\Users\Chrisi\AppData\Local\Temp\EAD415.exe C:\Users\Chrisi\AppData\Local\Temp\EAD4F58.exe C:\Users\Chrisi\AppData\Local\Temp\EAD86B0.exe C:\Users\Chrisi\AppData\Local\Temp\EADC86C.exe C:\Users\Chrisi\AppData\Local\Temp\eauninstall.exe C:\Users\Chrisi\AppData\Local\Temp\EBUD76A.EXE C:\Users\Chrisi\AppData\Local\Temp\EBUD9AB.DLL C:\Users\Chrisi\AppData\Local\Temp\First15.exe C:\Users\Chrisi\AppData\Local\Temp\GenericUninstall.exe C:\Users\Chrisi\AppData\Local\Temp\installerdll.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll88319950.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll88421319.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll89448773.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll89449740.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll89474092.dll C:\Users\Chrisi\AppData\Local\Temp\installerdll89500846.dll C:\Users\Chrisi\AppData\Local\Temp\InstallManager_BAB_BAB.exe C:\Users\Chrisi\AppData\Local\Temp\instloffer.exe C:\Users\Chrisi\AppData\Local\Temp\mfc80.dll C:\Users\Chrisi\AppData\Local\Temp\mfc80u.dll C:\Users\Chrisi\AppData\Local\Temp\mfcm80.dll C:\Users\Chrisi\AppData\Local\Temp\mfcm80u.dll C:\Users\Chrisi\AppData\Local\Temp\mgsqlite3.dll C:\Users\Chrisi\AppData\Local\Temp\msvcm80.dll C:\Users\Chrisi\AppData\Local\Temp\msvcp80.dll C:\Users\Chrisi\AppData\Local\Temp\msvcr80.dll C:\Users\Chrisi\AppData\Local\Temp\NEW71C5.tmp.exe C:\Users\Chrisi\AppData\Local\Temp\nseB2E3.exe C:\Users\Chrisi\AppData\Local\Temp\nsfB68D.exe C:\Users\Chrisi\AppData\Local\Temp\nsp71EC.exe C:\Users\Chrisi\AppData\Local\Temp\nsp75E3.exe C:\Users\Chrisi\AppData\Local\Temp\nspBB10.exe C:\Users\Chrisi\AppData\Local\Temp\nsu6DC6.exe C:\Users\Chrisi\AppData\Local\Temp\oct725D.tmp.exe C:\Users\Chrisi\AppData\Local\Temp\oct74AB.tmp.exe C:\Users\Chrisi\AppData\Local\Temp\oct8BA3.tmp.exe C:\Users\Chrisi\AppData\Local\Temp\octED0F.tmp.exe C:\Users\Chrisi\AppData\Local\Temp\oi_{FFAEBA27-728F-4A9A-BF0F-4C86497B234F}.exe C:\Users\Chrisi\AppData\Local\Temp\rootsupd.exe C:\Users\Chrisi\AppData\Local\Temp\scrubber.exe C:\Users\Chrisi\AppData\Local\Temp\Setup.exe C:\Users\Chrisi\AppData\Local\Temp\setup_fsu_cid.exe C:\Users\Chrisi\AppData\Local\Temp\SkypeSetup.exe C:\Users\Chrisi\AppData\Local\Temp\smt_ar_dosearches.exe C:\Users\Chrisi\AppData\Local\Temp\SPSetup.exe C:\Users\Chrisi\AppData\Local\Temp\The Sims 2_uninst.exe C:\Users\Chrisi\AppData\Local\Temp\TmDbg32.dll C:\Users\Chrisi\AppData\Local\Temp\TmDbg64.dll C:\Users\Chrisi\AppData\Local\Temp\uninst1.exe C:\Users\Chrisi\AppData\Local\Temp\UninstallEADM.dll C:\Users\Chrisi\AppData\Local\Temp\vcredist_x64.exe C:\Users\Chrisi\AppData\Local\Temp\vcredist_x86.exe C:\Users\Chrisi\AppData\Local\Temp\VP6Install.exe C:\Users\Chrisi\AppData\Local\Temp\VP6VFW.dll C:\Users\Chrisi\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe C:\Users\Chrisi\AppData\Local\Temp\WSSetup.exe C:\Users\Chrisi\AppData\Local\Temp\ytd_bu10_setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-29 12:38 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2014 Ran by Chrisi at 2014-05-02 10:13:21 Running from C:\Users\Chrisi\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Action Replay Code Manager (HKLM-x32\...\Action Replay Code Manager_is1) (Version: - ) Action Replay DSi Code Manager (HKLM-x32\...\Action Replay DSi Code Manager_is1) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated) Advanced System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.10568 - Systweak Software) <==== ATTENTION AI TouchMedia (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.3512 - CyberLink Corp.) AI TouchMedia (x32 Version: 6.0.3512 - CyberLink Corp.) Hidden Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft PhotoStudio 5.5 (HKLM-x32\...\{85309D89-7BE9-4094-BB17-24999C6118FC}) (Version: - ArcSoft) ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS) ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK) ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0014 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0021 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS) ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4015 - CyberLink Corp.) ASUS Video Magic (x32 Version: 6.0.4015 - CyberLink Corp.) Hidden ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.) ATI AVIVO64 Codecs (Version: 11.6.0.50811 - ATI Technologies Inc.) Hidden ATI Catalyst Install Manager (HKLM\...\{FDB61EAE-7C1D-7EB6-E1EE-14528E3EB266}) (Version: 3.0.790.0 - ATI Technologies, Inc.) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS) AVG Security Toolbar (HKLM-x32\...\AVG Secure Search) (Version: 18.1.0.443 - AVG Technologies) Boingo Wi-Fi (HKLM-x32\...\{B653A2EC-D816-4498-A4FD-651047AB9DC9}) (Version: 1.7.0048 - Boingo Wireless, Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version: - ) Canon MP150 (HKLM\...\{CA9A3609-3ECC-4574-8824-A8161A71A603}) (Version: - ) Canon MP450 (HKLM\...\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}) (Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0811.2122.36462 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0811.2122.36462 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0811.2122.36462 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0811.2122.36462 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help English (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help French (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help German (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0811.2121.36462 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0811.2121.36462 - ATI) Hidden ccc-core-static (x32 Version: 2010.0811.2122.36462 - ATI) Hidden ccc-utility64 (Version: 2010.0811.2122.36462 - ATI) Hidden CeheapMee (HKLM-x32\...\{F6C44C71-2CFE-8176-3A4D-CBD0DCE5AEFA}) (Version: - CheapMe) Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media) Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.127.0.61 - Conexant) ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.8 - ASUS) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.) CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.0.1606_25588 - CyberLink Corp.) CyberLink MediaShow Espresso (x32 Version: 5.0.1606_25588 - CyberLink Corp.) Hidden CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.) CyberLink PhotoNow (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.) CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2609a - CyberLink Corp.) CyberLink PowerDirector (x32 Version: 8.0.2609a - CyberLink Corp.) Hidden CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3009.50 - CyberLink Corp.) CyberLink PowerDVD 9 (x32 Version: 9.0.3009.50 - CyberLink Corp.) Hidden DealPly (HKCU\...\DealPly) (Version: - ) <==== ATTENTION Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version: - Microsoft) Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.50.56 - Electronic Arts) Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts) Dream Day Wedding Married in Manhattan (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}) (Version: - Oberon Media) Driver Whiz (HKLM-x32\...\{0B540DA4-41AE-4B79-BEAB-0F07E09669AB}) (Version: 8.1 - Driver Whiz) DriverScanner (HKLM-x32\...\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1) (Version: 4.0.10.0 - Uniblue Systems Ltd) EasyBits GO (HKCU\...\Game Organizer) (Version: - EasyBits Media) ETDWare PS/2-x64 7.0.5.11_WHQL (HKLM\...\Elantech) (Version: 7.0.5.11 - ELAN Microelectronics Corp.) EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS) FoxTab FLV Player (HKCU\...\FoxTab FLV Player) (Version: - ) <==== ATTENTION Free Audio CD Burner version 2.0.23.430 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.430 - DVDVideoSoft Ltd.) Free Studio version 5.1.4 (HKLM-x32\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.) Free Video to iPod Converter version 4.2.20.602 (HKLM-x32\...\Free Video to iPod Converter_is1) (Version: - DVDVideoSoft Limited.) Free YouTube to iPhone Converter version 2.12.2.430 (HKLM-x32\...\Free YouTube to iPhone Converter_is1) (Version: 2.12.2.430 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.) Game Park Console (HKLM-x32\...\{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1) (Version: 6.2.0.2 - Oberon Media, Inc.) GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.107 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden iCloud (HKLM\...\{8B485965-8EFE-464A-842F-CF8F18C3DFD7}) (Version: 1.1.0.40 - Apple Inc.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel) iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.) Java Auto Updater (x32 Version: 2.0.1.2 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 18 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.) JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version: - ) Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version: - ) Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - ) Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - ) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.) Mozilla Firefox (3.6.25) (HKLM-x32\...\Mozilla Firefox (3.6.25)) (Version: 3.6.25 (de) - Mozilla) MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) Nero Burning ROM (x32 Version: 12.5.5001 - Nero AG) Hidden Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden Nero BurningROM 12 (HKLM-x32\...\{4AC7B4F3-1B75-4BA7-82C4-F9A22B430A3D}) (Version: 12.5.00900 - Nero AG) Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden Network Acceleration (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{2384af53}) (Version: - PlanetCore) <==== ATTENTION Origin (HKLM-x32\...\Origin) (Version: 8.2.6.475 - Electronic Arts, Inc.) Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.82 - PowerOfSoftware Ltd.) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Piggly FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}) (Version: - Oberon Media) Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung SPP-2040 Series (HKLM-x32\...\Samsung SPP-2040 Series) (Version: - ) Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.20.154 - Conduit) <==== ATTENTION Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Smileyville FREE (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}) (Version: - Oberon Media) Spotify (HKCU\...\Spotify) (Version: 0.8.0.1035.g278cc85b - Spotify AB) syncables desktop SE (HKLM-x32\...\{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}) (Version: 5.5.615.9518 - syncables) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software) TuneUp Utilities 2014 (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Wildlife Park 2 - Diamant Edition v2.1 (HKLM-x32\...\Wildlife Park 2 - Diamant Edition_is1) (Version: - Deep Silver) Wildlife Park 2 Patch 2.00 (HKLM-x32\...\{804ED550-B39F-474D-AC6C-49C35511F14D}) (Version: 2.00 - Deep Silver) Windows Live Anmelde-Assistent (HKLM-x32\...\{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}) (Version: 5.000.818.6 - Microsoft Corporation) Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.3 - ASUS) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.17 - ASUS) ==================== Restore Points ========================= 30-04-2014 04:46:30 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {07CFAB6D-AD2D-4F33-8CBA-2159C9D9EBA5} - System32\Tasks\dsmonitor => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2013-01-16] (Uniblue Systems Ltd) Task: {17957954-02E4-4CD4-902A-593786D8E7EE} - System32\Tasks\DealPly => C:\Users\Chrisi\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-03-10] () <==== ATTENTION Task: {1996944C-2B9D-4B4A-B0B2-EE2CFEDAF895} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated) Task: {20358F01-9835-42D6-A560-66CDBABA72B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.) Task: {30100829-E315-434A-8DAF-F8A56D3C1BDF} - System32\Tasks\{D966A093-25AF-4F5C-B405-293CB50783B2} => C:\Program Files (x86)\Skype\\Phone\Skype.exe Task: {3D78D475-DC4E-45E6-B6F7-F6BF9035CB0B} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-12] (ASUS) Task: {3DFA37DD-EC98-4350-B3FF-3BA85E4239E7} - System32\Tasks\Driver Whiz-RTMScanRunOnce => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters) Task: {448D442C-6479-459D-908E-1B061F6863FA} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS) Task: {51833F6D-D31E-4A5E-BB8A-513600955B45} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS) Task: {51DD94A8-211B-49DD-8165-91E637C6950D} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-06-09] (asus) Task: {6106E81F-AD81-454F-8ACF-E9AA88B90149} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {7CAE0B06-2142-43E2-845A-BDE11313A684} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters) Task: {80C0079A-4D5D-40B9-97BC-608B2DCF2E3A} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters) Task: {88B41851-B488-4123-90AB-D07E013E05F3} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software) Task: {8B3427B0-CEB4-4F76-A148-63166870379C} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2011-12-19] (DealPly) <==== ATTENTION Task: {A7141105-EF19-4843-A669-75F9D781477F} - System32\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-11] (Google Inc.) Task: {B0052C91-18AF-4BC0-BBF8-5D4523F14E88} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {E0049FA9-9617-455F-81DC-D77FA8996288} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2013-09-19] (PC Drivers Headquarters) Task: {E4050643-0C31-48C4-A028-7F6B455F8ADE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {F77554FF-153A-430B-A868-4694F6D84EB0} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-02-04] (Systweak) <==== ATTENTION Task: {F94A5F66-378C-4E12-B60A-965E7D8180B3} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\dsmonitor.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce13fdd1e02392.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2011-02-14 17:03 - 2006-12-04 02:26 - 00022016 _____ () C:\Windows\System32\SPPB1l6.DLL 2014-02-03 20:58 - 2014-02-03 20:58 - 04358656 _____ () C:\ProgramData\Network Acceleration\NetworkAcceleration_x64.dll 2013-08-30 10:51 - 2013-08-30 10:51 - 00757048 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll 2014-04-28 16:41 - 2014-04-28 16:40 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe 2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2010-11-11 06:43 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2008-10-01 09:02 - 2008-10-01 09:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2007-06-15 20:28 - 2007-06-15 20:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll 2007-06-02 02:52 - 2007-06-02 02:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll 2010-03-16 03:48 - 2010-03-16 03:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll 2010-11-11 06:20 - 2010-11-11 06:20 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll 2010-11-11 06:20 - 2010-11-11 06:20 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll 2010-03-16 03:48 - 2010-03-16 03:48 - 01754448 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe 2013-09-19 10:00 - 2013-09-19 10:00 - 00684416 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.DriverWhiz.dll 2013-09-19 09:31 - 2013-09-19 09:31 - 00412064 _____ () C:\Program Files (x86)\Driver Whiz\Driver Whiz\Agent.Communication.XmlSerializers.dll 2010-11-11 05:53 - 2010-04-06 08:29 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2013-06-28 06:33 - 2014-04-28 16:40 - 02557976 _____ () C:\Program Files (x86)\AVG Secure Search\vprot.exe 2014-02-03 20:58 - 2014-02-03 20:58 - 04116480 _____ () C:\ProgramData\Network Acceleration\NetworkAcceleration.dll 2014-02-03 20:58 - 2014-02-03 20:58 - 00179536 _____ () C:\ProgramData\Network Acceleration\NetworkAccelerationSvc.dll 2014-04-28 16:41 - 2014-04-28 16:40 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll 2013-02-07 10:02 - 2012-07-25 13:03 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll 2013-02-07 10:02 - 2013-02-04 16:19 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll 2013-02-07 10:02 - 2012-07-25 13:03 - 00168448 _____ () C:\Program Files (x86)\Advanced System Protector\UNRAR.DLL 2009-11-12 21:01 - 2009-11-12 21:01 - 00873768 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll 2009-11-12 21:01 - 2009-11-12 21:01 - 00013096 _____ () C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll 2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2010-02-24 01:14 - 2010-02-24 01:14 - 00041472 _____ () C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll 2010-02-24 01:14 - 2010-02-24 01:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll 2010-02-24 01:11 - 2010-02-24 01:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll 2010-02-24 01:12 - 2010-02-24 01:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll 2010-02-24 01:14 - 2010-02-24 01:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll 2007-06-15 20:28 - 2007-06-15 20:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll 2007-06-02 03:08 - 2007-06-02 03:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll 2014-02-08 18:53 - 2014-02-02 01:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll 2014-02-08 18:53 - 2014-02-02 01:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll 2014-02-08 18:53 - 2014-02-02 01:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll 2014-02-08 18:53 - 2014-02-02 01:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll 2014-02-08 18:53 - 2014-02-02 01:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll 2014-02-08 18:53 - 2014-02-02 01:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:4CF61E54 ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk => C:\Windows\pss\SRS Premium Sound.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Chrisi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk => C:\Windows\pss\LimeWire On Startup.lnk.Startup MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe MSCONFIG\startupreg: Arabica => C:\Program Files (x86)\Arabica\Astart.exe MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe" MSCONFIG\startupreg: ETDWare => %ProgramFiles%\Elantech\ETDCtrl.exe MSCONFIG\startupreg: HPLJ Config => C:\Program Files (x86)\Hewlett-Packard\hp LaserJet 1150_1300\SetConfig.exe -c Direct -p USB -pn "" -n 0 -l -sl 120000 MSCONFIG\startupreg: PCMAgent => "C:\Program Files (x86)\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe" MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\ASUS\AI TouchMedia\PlayMovie\PMVService.exe" MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe" MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" MSCONFIG\startupreg: UpdatePSTShortCut => "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe" MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4134 Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4134 Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3042 Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3042 Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:55 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 999 System errors: ============= Error: (04/30/2014 06:34:53 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: %%20 Error: (04/30/2014 06:34:48 AM) (Source: BugCheck) (User: ) Description: 0x00000050 (0xfffff8a010425000, 0x0000000000000000, 0xfffff80002e6e664, 0x0000000000000000)C:\Windows\MEMORY.DMP043014-76159-01 Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/30/2014 06:34:39 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht. Error: (04/30/2014 06:34:06 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 30.04.2014 um 06:32:33 unerwartet heruntergefahren. Error: (04/30/2014 06:31:40 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: %%20 Error: (04/29/2014 00:49:22 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (04/29/2014 07:45:31 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (04/29/2014 07:44:22 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: %%20 Error: (04/28/2014 06:25:25 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Microsoft Office Sessions: ========================= Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4134 Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4134 Error: (04/30/2014 07:47:58 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3042 Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3042 Error: (04/30/2014 07:47:57 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (04/30/2014 07:47:56 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/30/2014 07:47:55 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 999 ==================== Memory info =========================== Percentage of memory in use: 60% Total physical RAM: 4020.51 MB Available physical RAM: 1603.45 MB Total Pagefile: 8039.2 MB Available Pagefile: 4883.37 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:7.94 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Data) (Fixed) (Total:329.79 GB) (Free:265.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0237A506) Partition 1: (Not Active) - (Size=20 GB) - (Type=1C) Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended) ==================== End Of Log ============================ LG Chrisi0104 |
![]() |