Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?

Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?


Log-Analyse und Auswertung: Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 04.06.2014, 20:10   #7
Calinjar
 
Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren? - Standard

Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?


Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 03.06.2014
Suchlauf-Zeit: 23:19:11
Logdatei: malwarescan 03.06.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.03.06
Rootkit Datenbank: v2014.06.02.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Andrea

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 309386
Verstrichene Zeit: 27 Min, 53 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.Softonic.A, C:\Users\Internet\Downloads\SoftonicDownloader_for_peerguardian.exe, In Quarantäne, [b260254ff08b91a59322869bcd34956b], 

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
ATTFilter
# AdwCleaner v3.211 - Bericht erstellt am 04/06/2014 um 17:10:01
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Andrea - CPU
# Gestartet von : C:\Users\Internet\Desktop\adwcleaner_3.211.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Uniblue
Ordner Gelöscht : C:\Program Files (x86)\GreenTree Applications
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Spigot
Ordner Gelöscht : C:\Users\Internet\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Internet\AppData\LocalLow\Search Settings
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Search Settings
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\StartSearch
Schlüssel Gelöscht : HKCU\Software\vShare.tv
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software
Schlüssel Gelöscht : HKLM\Software\Uniblue

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v

[ Datei : C:\Users\Andrea\AppData\Roaming\Mozilla\Firefox\Profiles\xee21ss4.default\prefs.js ]


[ Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default\prefs.js ]

Zeile gelöscht : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\11.1.0.12");

-\\ Google Chrome v35.0.1916.114

[ Datei : C:\Users\Andrea\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Gelöscht [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Gelöscht [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Gelöscht [Extension] : pfndaklgolladniicklehhancnlgocpp

*************************

AdwCleaner[R0].txt - [5358 octets] - [04/06/2014 17:08:15]
AdwCleaner[S0].txt - [4948 octets] - [04/06/2014 17:10:01]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [5008 octets] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Andrea on 04.06.2014 at 17:27:15,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1433357763-933051137-765875078-1001\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r515-n-bf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r515-n-bf_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r515-n-bf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r515-n-bf_RASMANCS



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho4BCB.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho6C9F.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Andrea\AppData\Roaming\getrighttogo"
Successfully deleted: [Empty Folder] C:\Users\Andrea\appdata\local\{81CB9472-E5E5-477E-898E-164B0B100489}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.06.2014 at 17:33:52,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Internet (ATTENTION: The logged in user is not administrator) on CPU on 04-06-2014 17:49:50
Running from C:\Users\Internet\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Mozilla Corporation) C:\Users\Internet\AppData\Local\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-22] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe" "C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware " [54072 2014-05-12] (Malwarebytes Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.avg.com/?cid={1A78135B-1E88-4A03-A9DF-1A01DFABCC8C}&mid=af14fa18a2034553acf6ec4cbb2f1136-4c4bfe203a1c5bd611b7ff0c6e590c69bc93170c&lang=de&ds=hk011&pr=sa&d=2012-07-10 22:59:03&v=11.1.0.12&sap=hp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {58253FDF-36F1-4530-A042-44509538C8EE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=231195&p={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={1A78135B-1E88-4A03-A9DF-1A01DFABCC8C}&mid=af14fa18a2034553acf6ec4cbb2f1136-4c4bfe203a1c5bd611b7ff0c6e590c69bc93170c&lang=de&ds=hk011&pr=sa&d=2012-07-10 22:59:03&v=11.1.0.12&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Extension: WOT - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-06-04]
FF Extension: NoScript - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-07-16]
FF Extension: Adblock Plus - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\o2go81ah.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-04-14]
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-04-05]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-04-05]
FF StartMenuInternet: FIREFOX.EXE - C:\Users\Internet\AppData\Local\Mozilla Firefox\firefox.exe

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-12]
CHR Extension: (Google Drive) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-12]
CHR Extension: (YouTube) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-12]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-04-11]
CHR Extension: (Google Search) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-12]
CHR Extension: (Google Wallet) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-07]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-05]
CHR Extension: (Gmail) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-12]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-04-02]

==================== Services (Whitelisted) =================

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-05-02] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-02] (Avira Operations GmbH & Co. KG)
S4 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-25] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-06] (Duplex Secure Ltd.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RivaTuner64; \??\D:\RivaTuner v2.24\RivaTuner64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-04 17:49 - 2014-06-04 17:49 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-06-04 17:42 - 2014-06-04 17:42 - 00001286 _____ () C:\Users\Internet\Desktop\malwarescan 03.06.txt
2014-06-04 17:33 - 2014-06-04 17:33 - 00002152 _____ () C:\Users\Andrea\Desktop\JRT.txt
2014-06-04 17:27 - 2014-06-04 17:27 - 00000000 ____D () C:\Windows\ERUNT
2014-06-04 17:25 - 2014-06-04 17:25 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-06-04 17:08 - 2014-06-04 17:10 - 00000000 ____D () C:\AdwCleaner
2014-06-04 17:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-03 23:18 - 2014-06-03 23:18 - 01327971 _____ () C:\Users\Internet\Desktop\adwcleaner_3.211.exe
2014-06-03 23:17 - 2014-06-04 17:36 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 23:17 - 2014-06-03 23:17 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-03 23:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-03 23:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-03 23:15 - 2014-06-03 23:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-06-02 20:50 - 2014-06-04 17:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00016234 _____ () C:\ComboFix.txt
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-02 19:52 - 2014-06-02 20:50 - 00000000 ____D () C:\Qoobox
2014-06-02 19:52 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-02 19:52 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-02 19:52 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-02 19:51 - 2014-06-02 20:48 - 00000000 ____D () C:\Windows\erdnt
2014-06-02 19:45 - 2014-06-02 19:45 - 05203398 ____R (Swearware) C:\Users\Internet\Desktop\ComboFix.exe
2014-06-02 14:21 - 2014-06-02 14:21 - 00000000 ____D () C:\Users\Internet\AppData\Local\DDMSettings
2014-06-02 12:48 - 2014-06-02 12:50 - 32680168 _____ (DVDVideoSoft Ltd. ) C:\Users\Internet\Downloads\FreeMP4VideoConverter-5.0.42.530.exe
2014-06-02 12:08 - 2014-06-02 12:08 - 00000000 ____D () C:\Users\Internet\AppData\Local\{C9A67DE0-4E90-42D5-B2B5-508B7483DE7A}
2014-06-02 07:13 - 2014-06-02 07:13 - 00004919 _____ () C:\ProgramData\uxxadbmu.rlu
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MOVAVI
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Local\Movavi
2014-06-02 05:38 - 2014-06-02 05:39 - 00000000 ____D () C:\Users\Internet\Documents\Beauties
2014-06-02 05:13 - 2014-06-02 05:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2014-06-02 05:09 - 2014-06-02 05:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerBlock - CHIP-Installer.exe
2014-06-02 04:48 - 2014-06-02 04:48 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerGuardian - CHIP-Installer.exe
2014-06-02 04:10 - 2014-06-02 04:10 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\BitTorrent
2014-06-02 04:08 - 2014-06-02 15:24 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\BitTorrent
2014-06-01 20:58 - 2014-06-01 20:58 - 00042013 _____ () C:\Users\Internet\Desktop\Addition.txt
2014-06-01 20:57 - 2014-06-04 17:49 - 00012514 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-06-01 20:57 - 2014-06-04 17:49 - 00000000 ____D () C:\FRST
2014-06-01 20:55 - 2014-06-04 17:49 - 02068992 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-06-01 15:35 - 2014-06-01 15:37 - 31419822 _____ () C:\Users\Internet\Downloads\JDownloader.zip
2014-06-01 12:54 - 2014-06-01 12:54 - 00000000 ____D () C:\Users\Internet\Documents\zips
2014-06-01 11:52 - 2014-06-01 11:52 - 00000871 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\Program Files\CPUID
2014-06-01 11:51 - 2014-06-01 11:52 - 01496480 _____ ( ) C:\Users\Internet\Downloads\cpu-z_1.692-setup-en.exe
2014-06-01 11:21 - 2014-06-01 11:21 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Desktop\HijackThis - CHIP-Installer.exe
2014-06-01 11:15 - 2014-06-01 11:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-01 09:19 - 2011-08-18 05:44 - 00053376 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-01 08:26 - 2014-06-01 08:26 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 08:13 - 2014-06-01 08:13 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-01 08:10 - 2014-06-01 08:12 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-01 08:10 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI
2014-05-29 12:42 - 2014-05-29 12:42 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2014-05-29 00:44 - 2014-05-29 00:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\WinZip
2014-05-29 00:29 - 2014-05-29 00:43 - 197334425 _____ () C:\Users\Internet\Downloads\We are the Underdogs - Sound of the Underground Vol I.zip
2014-05-28 10:41 - 2014-05-28 10:41 - 00002269 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00002263 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Internet\Documents\processexplorer
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-28 10:40 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-28 10:40 - 2014-05-28 10:41 - 00000000 ____D () C:\Program Files\WinZip
2014-05-28 10:28 - 2014-05-28 10:28 - 01243655 _____ () C:\Users\Internet\Downloads\ProcessExplorer.zip
2014-05-28 09:43 - 2014-05-28 09:43 - 00001266 _____ () C:\Users\Andrea\Desktop\Revo Uninstaller.lnk
2014-05-28 09:43 - 2014-05-28 09:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-28 09:42 - 2014-05-28 09:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-05-27 18:21 - 2014-05-27 18:21 - 00010736 _____ () C:\Users\Internet\Documents\cc_20140527_182153.reg
2014-05-20 01:03 - 2014-05-20 01:03 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Atheros
2014-05-20 00:56 - 2014-05-25 19:15 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-05-20 00:56 - 2014-05-20 00:56 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Atheros
2014-05-20 00:52 - 2014-05-20 00:53 - 179393762 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_AW_Compal_Win7_64_Z74098.zip
2014-05-19 23:45 - 2014-05-19 23:45 - 00000000 ____D () C:\Users\Andrea\Documents\Bluetooth Folder
2014-05-19 23:43 - 2014-05-19 23:43 - 00000000 ____D () C:\temp
2014-05-19 23:41 - 2014-05-19 23:42 - 179393768 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_Win7_64_Z74098.zip
2014-05-19 20:17 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-19 20:17 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-19 20:14 - 2014-05-19 20:14 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61[1].zip
2014-05-19 20:13 - 2014-05-19 20:13 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61.zip
2014-05-15 17:21 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 17:21 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 17:21 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 17:21 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:21 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 17:21 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 17:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 17:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 17:30 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 17:30 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 17:30 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 17:30 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 17:30 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 17:30 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 17:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 17:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 17:30 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 17:30 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 17:30 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 17:30 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 17:30 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 17:30 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 17:30 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 22:29 - 2014-06-01 12:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\Warframe
2014-05-10 22:27 - 2014-05-10 22:27 - 00331776 _____ () C:\Users\Internet\Downloads\Warframe.msi
2014-05-10 03:52 - 2014-06-02 16:16 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla Firefox
2014-05-07 03:02 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-07 03:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-07 03:01 - 2014-05-16 01:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 03:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-07 03:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-07 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-07 03:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-07 03:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-07 03:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-07 03:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-07 03:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-07 03:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-07 03:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-07 03:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-07 03:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-07 03:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-07 03:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-07 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-07 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-07 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-07 03:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-07 03:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-07 03:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-07 03:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-07 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-07 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-07 03:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-07 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-07 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-07 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-07 03:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-07 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-07 03:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-07 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-07 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-07 03:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-07 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-07 03:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-07 03:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-07 03:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-07 03:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-07 03:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-07 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-07 03:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-07 03:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-06-04 17:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\temp
2014-06-04 17:50 - 2014-06-01 20:57 - 00012514 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-06-04 17:49 - 2014-06-04 17:49 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-06-04 17:49 - 2014-06-01 20:57 - 00000000 ____D () C:\FRST
2014-06-04 17:49 - 2014-06-01 20:55 - 02068992 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-06-04 17:42 - 2014-06-04 17:42 - 00001286 _____ () C:\Users\Internet\Desktop\malwarescan 03.06.txt
2014-06-04 17:41 - 2011-04-13 04:33 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-04 17:36 - 2014-06-03 23:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-04 17:34 - 2013-04-05 19:24 - 00001364 _____ () C:\Users\Internet\Desktop\Mozilla Firefox.lnk
2014-06-04 17:33 - 2014-06-04 17:33 - 00002152 _____ () C:\Users\Andrea\Desktop\JRT.txt
2014-06-04 17:27 - 2014-06-04 17:27 - 00000000 ____D () C:\Windows\ERUNT
2014-06-04 17:25 - 2014-06-04 17:25 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-06-04 17:19 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-04 17:19 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-04 17:16 - 2011-07-24 05:59 - 01251096 _____ () C:\Windows\WindowsUpdate.log
2014-06-04 17:11 - 2013-08-01 01:26 - 00150578 _____ () C:\Windows\PFRO.log
2014-06-04 17:11 - 2013-07-25 23:23 - 00044616 _____ () C:\Windows\setupact.log
2014-06-04 17:11 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-04 17:10 - 2014-06-04 17:08 - 00000000 ____D () C:\AdwCleaner
2014-06-04 17:02 - 2011-04-13 04:33 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-04 06:14 - 2011-02-19 06:24 - 00711546 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 06:14 - 2011-02-19 06:24 - 00153736 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 06:14 - 2009-07-14 07:13 - 01652996 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 06:03 - 2013-11-10 11:42 - 00000000 ____D () C:\Users\Internet\AppData\Local\Battle.net
2014-06-04 02:21 - 2011-04-13 04:43 - 00000000 ____D () C:\Windows\el
2014-06-03 23:18 - 2014-06-03 23:18 - 01327971 _____ () C:\Users\Internet\Desktop\adwcleaner_3.211.exe
2014-06-03 23:17 - 2014-06-03 23:17 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-03 23:16 - 2014-06-03 23:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-06-02 20:50 - 2014-06-02 20:50 - 00016234 _____ () C:\ComboFix.txt
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 19:52 - 00000000 ____D () C:\Qoobox
2014-06-02 20:48 - 2014-06-02 19:51 - 00000000 ____D () C:\Windows\erdnt
2014-06-02 20:44 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-02 19:45 - 2014-06-02 19:45 - 05203398 ____R (Swearware) C:\Users\Internet\Desktop\ComboFix.exe
2014-06-02 16:41 - 2009-07-14 06:45 - 00280408 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-02 16:16 - 2014-05-10 03:52 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla Firefox
2014-06-02 15:24 - 2014-06-02 04:08 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\BitTorrent
2014-06-02 14:21 - 2014-06-02 14:21 - 00000000 ____D () C:\Users\Internet\AppData\Local\DDMSettings
2014-06-02 12:52 - 2013-11-22 17:50 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\DVDVideoSoft
2014-06-02 12:52 - 2013-11-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-06-02 12:52 - 2012-11-29 19:25 - 00000000 ____D () C:\Users\Internet\Documents\DVDVideoSoft
2014-06-02 12:52 - 2012-11-29 19:21 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\DVDVideoSoft
2014-06-02 12:50 - 2014-06-02 12:48 - 32680168 _____ (DVDVideoSoft Ltd. ) C:\Users\Internet\Downloads\FreeMP4VideoConverter-5.0.42.530.exe
2014-06-02 12:13 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-06-02 12:08 - 2014-06-02 12:08 - 00000000 ____D () C:\Users\Internet\AppData\Local\{C9A67DE0-4E90-42D5-B2B5-508B7483DE7A}
2014-06-02 07:13 - 2014-06-02 07:13 - 00004919 _____ () C:\ProgramData\uxxadbmu.rlu
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MOVAVI
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Local\Movavi
2014-06-02 07:13 - 2012-07-27 22:27 - 00058928 _____ () C:\Users\Internet\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-02 06:33 - 2011-03-07 12:16 - 00000000 ____D () C:\Users\Internet\Desktop\JDownloader
2014-06-02 05:39 - 2014-06-02 05:38 - 00000000 ____D () C:\Users\Internet\Documents\Beauties
2014-06-02 05:13 - 2014-06-02 05:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2014-06-02 05:09 - 2014-06-02 05:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerBlock - CHIP-Installer.exe
2014-06-02 04:48 - 2014-06-02 04:48 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerGuardian - CHIP-Installer.exe
2014-06-02 04:10 - 2014-06-02 04:10 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\BitTorrent
2014-06-01 20:58 - 2014-06-01 20:58 - 00042013 _____ () C:\Users\Internet\Desktop\Addition.txt
2014-06-01 20:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-06-01 15:37 - 2014-06-01 15:35 - 31419822 _____ () C:\Users\Internet\Downloads\JDownloader.zip
2014-06-01 12:54 - 2014-06-01 12:54 - 00000000 ____D () C:\Users\Internet\Documents\zips
2014-06-01 12:54 - 2013-12-01 21:23 - 00000000 ____D () C:\Users\Internet\Documents\Downloads1
2014-06-01 12:53 - 2013-12-29 13:27 - 00000000 ____D () C:\Users\Internet\Documents\Karten
2014-06-01 12:50 - 2014-05-10 22:29 - 00000000 ____D () C:\Users\Internet\AppData\Local\Warframe
2014-06-01 12:38 - 2013-05-06 02:20 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-06-01 11:52 - 2014-06-01 11:52 - 00000871 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\Program Files\CPUID
2014-06-01 11:52 - 2014-06-01 11:51 - 01496480 _____ ( ) C:\Users\Internet\Downloads\cpu-z_1.692-setup-en.exe
2014-06-01 11:21 - 2014-06-01 11:21 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Desktop\HijackThis - CHIP-Installer.exe
2014-06-01 11:17 - 2013-05-27 05:46 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Malwarebytes
2014-06-01 11:17 - 2013-05-27 05:45 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 11:16 - 2014-06-01 11:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-01 10:30 - 2013-08-06 00:39 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\uTorrent
2014-06-01 09:21 - 2013-10-29 23:45 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-01 09:09 - 2011-08-17 23:00 - 00000000 ____D () C:\Users\Andrea
2014-06-01 09:06 - 2011-09-30 19:29 - 00000000 ____D () C:\Users\Internet
2014-06-01 09:05 - 2013-05-06 02:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-06-01 09:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-06-01 09:04 - 2012-09-26 01:01 - 00000000 ____D () C:\AMD
2014-06-01 08:26 - 2014-06-01 08:26 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 08:13 - 2014-06-01 08:13 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-01 08:13 - 2011-07-24 06:12 - 00000000 ____D () C:\ProgramData\AMD
2014-06-01 08:12 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-01 08:10 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI
2014-05-31 20:30 - 2012-09-29 16:27 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Spotify
2014-05-31 20:09 - 2012-09-29 16:28 - 00000000 ____D () C:\Users\Internet\AppData\Local\Spotify
2014-05-31 18:53 - 2012-09-27 22:34 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\SoftGrid Client
2014-05-31 17:03 - 2014-03-09 14:43 - 00000000 ____D () C:\Users\Internet\Documents\Bewerbungsunterlagen
2014-05-29 12:42 - 2014-05-29 12:42 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2014-05-29 00:44 - 2014-05-29 00:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\WinZip
2014-05-29 00:43 - 2014-05-29 00:29 - 197334425 _____ () C:\Users\Internet\Downloads\We are the Underdogs - Sound of the Underground Vol I.zip
2014-05-28 10:41 - 2014-05-28 10:41 - 00002269 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00002263 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Internet\Documents\processexplorer
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-28 10:41 - 2014-05-28 10:40 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-28 10:41 - 2014-05-28 10:40 - 00000000 ____D () C:\Program Files\WinZip
2014-05-28 10:28 - 2014-05-28 10:28 - 01243655 _____ () C:\Users\Internet\Downloads\ProcessExplorer.zip
2014-05-28 10:01 - 2011-04-13 04:47 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-05-28 10:00 - 2011-07-24 06:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-28 09:43 - 2014-05-28 09:43 - 00001266 _____ () C:\Users\Andrea\Desktop\Revo Uninstaller.lnk
2014-05-28 09:43 - 2014-05-28 09:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-28 09:42 - 2014-05-28 09:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-05-27 18:21 - 2014-05-27 18:21 - 00010736 _____ () C:\Users\Internet\Documents\cc_20140527_182153.reg
2014-05-27 17:52 - 2014-04-16 19:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcaniA - Gothic 4
2014-05-27 17:52 - 2012-04-14 21:18 - 00000000 ____D () C:\Windows\system32\Macromed
2014-05-27 17:52 - 2011-04-13 04:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-27 17:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-27 17:51 - 2011-08-27 15:46 - 00000000 ___RD () C:\MSOCache
2014-05-27 17:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-25 19:15 - 2014-05-20 00:56 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-05-20 17:20 - 2013-10-29 02:10 - 00000000 ____D () C:\Users\Internet\Desktop\Andrej's Mukke
2014-05-20 01:03 - 2014-05-20 01:03 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Atheros
2014-05-20 00:56 - 2014-05-20 00:56 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Atheros
2014-05-20 00:53 - 2014-05-20 00:52 - 179393762 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_AW_Compal_Win7_64_Z74098.zip
2014-05-19 23:45 - 2014-05-19 23:45 - 00000000 ____D () C:\Users\Andrea\Documents\Bluetooth Folder
2014-05-19 23:43 - 2014-05-19 23:43 - 00000000 ____D () C:\temp
2014-05-19 23:42 - 2014-05-19 23:41 - 179393768 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_Win7_64_Z74098.zip
2014-05-19 20:27 - 2014-05-19 20:17 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-19 20:27 - 2014-05-19 20:17 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-19 20:14 - 2014-05-19 20:14 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61[1].zip
2014-05-19 20:13 - 2014-05-19 20:13 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61.zip
2014-05-16 15:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 13:31 - 2014-02-20 02:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-16 13:31 - 2014-02-20 02:42 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-16 13:28 - 2011-09-30 19:29 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 13:28 - 2011-09-30 19:29 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 01:26 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 17:20 - 2013-08-15 03:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 17:17 - 2011-08-29 20:00 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-13 19:16 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-12 07:26 - 2014-06-03 23:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-03 23:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-03 23:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 22:31 - 2014-04-16 17:24 - 00035506 _____ () C:\Windows\DirectX.log
2014-05-10 22:27 - 2014-05-10 22:27 - 00331776 _____ () C:\Users\Internet\Downloads\Warframe.msi
2014-05-09 08:14 - 2014-05-14 17:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 17:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-06 06:40 - 2014-05-15 17:21 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 17:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 17:21 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 17:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 17:21 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 17:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
--- --- ---

--- --- ---


Entschuldige bitte meinen Doppelpost, aber FRST versehentlich im falschen Profil aus gescannt


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Andrea (administrator) on CPU on 04-06-2014 21:06:32
Running from C:\Users\Andrea\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-22] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Andrea\AppData\Roaming\Mozilla\Firefox\Profiles\xee21ss4.default
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Keyword.URL: hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=231195&ilc=12&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-04-05]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF StartMenuInternet: FIREFOX.EXE - C:\Users\Internet\AppData\Local\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Wallet) - C:\Users\Andrea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Andrea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-06]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-04-02]

==================== Services (Whitelisted) =================

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-05-02] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-02] (Avira Operations GmbH & Co. KG)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-25] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-06] (Duplex Secure Ltd.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RivaTuner64; \??\D:\RivaTuner v2.24\RivaTuner64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-04 21:06 - 2014-06-04 21:06 - 00010211 _____ () C:\Users\Andrea\Desktop\FRST.txt
2014-06-04 21:06 - 2014-06-04 17:49 - 02068992 _____ (Farbar) C:\Users\Andrea\Desktop\FRST64.exe
2014-06-04 17:49 - 2014-06-04 17:49 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-06-04 17:42 - 2014-06-04 17:42 - 00001286 _____ () C:\Users\Internet\Desktop\malwarescan 03.06.txt
2014-06-04 17:33 - 2014-06-04 17:33 - 00002152 _____ () C:\Users\Andrea\Desktop\JRT.txt
2014-06-04 17:27 - 2014-06-04 17:27 - 00000000 ____D () C:\Windows\ERUNT
2014-06-04 17:25 - 2014-06-04 17:25 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-06-04 17:08 - 2014-06-04 17:10 - 00000000 ____D () C:\AdwCleaner
2014-06-04 17:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-03 23:18 - 2014-06-03 23:18 - 01327971 _____ () C:\Users\Internet\Desktop\adwcleaner_3.211.exe
2014-06-03 23:17 - 2014-06-04 17:36 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 23:17 - 2014-06-03 23:17 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-03 23:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-03 23:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-03 23:15 - 2014-06-03 23:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-06-02 20:50 - 2014-06-04 21:05 - 00000000 ____D () C:\Users\Internet\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00016234 _____ () C:\ComboFix.txt
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-02 20:02 - 2014-06-04 21:07 - 00000000 ____D () C:\Users\Andrea\AppData\Local\temp
2014-06-02 19:52 - 2014-06-02 20:50 - 00000000 ____D () C:\Qoobox
2014-06-02 19:52 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-02 19:52 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-02 19:52 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-02 19:52 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-02 19:51 - 2014-06-02 20:48 - 00000000 ____D () C:\Windows\erdnt
2014-06-02 19:45 - 2014-06-02 19:45 - 05203398 ____R (Swearware) C:\Users\Internet\Desktop\ComboFix.exe
2014-06-02 14:21 - 2014-06-02 14:21 - 00000000 ____D () C:\Users\Internet\AppData\Local\DDMSettings
2014-06-02 12:48 - 2014-06-02 12:50 - 32680168 _____ (DVDVideoSoft Ltd. ) C:\Users\Internet\Downloads\FreeMP4VideoConverter-5.0.42.530.exe
2014-06-02 12:08 - 2014-06-02 12:08 - 00000000 ____D () C:\Users\Internet\AppData\Local\{C9A67DE0-4E90-42D5-B2B5-508B7483DE7A}
2014-06-02 07:13 - 2014-06-02 07:13 - 00004919 _____ () C:\ProgramData\uxxadbmu.rlu
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MOVAVI
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Local\Movavi
2014-06-02 05:38 - 2014-06-02 05:39 - 00000000 ____D () C:\Users\Internet\Documents\Beauties
2014-06-02 05:13 - 2014-06-02 05:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2014-06-02 05:09 - 2014-06-02 05:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerBlock - CHIP-Installer.exe
2014-06-02 04:48 - 2014-06-02 04:48 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerGuardian - CHIP-Installer.exe
2014-06-02 04:10 - 2014-06-02 04:10 - 00001206 _____ () C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-06-02 04:10 - 2014-06-02 04:10 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\BitTorrent
2014-06-02 04:08 - 2014-06-02 15:24 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\BitTorrent
2014-06-01 20:58 - 2014-06-01 20:58 - 00042013 _____ () C:\Users\Internet\Desktop\Addition.txt
2014-06-01 20:57 - 2014-06-04 21:06 - 00000000 ____D () C:\FRST
2014-06-01 20:57 - 2014-06-04 17:51 - 00048572 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-06-01 20:55 - 2014-06-04 17:49 - 02068992 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-06-01 15:35 - 2014-06-01 15:37 - 31419822 _____ () C:\Users\Internet\Downloads\JDownloader.zip
2014-06-01 12:54 - 2014-06-01 12:54 - 00000000 ____D () C:\Users\Internet\Documents\zips
2014-06-01 11:52 - 2014-06-01 11:52 - 00000871 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\Program Files\CPUID
2014-06-01 11:51 - 2014-06-01 11:52 - 01496480 _____ ( ) C:\Users\Internet\Downloads\cpu-z_1.692-setup-en.exe
2014-06-01 11:21 - 2014-06-01 11:21 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Desktop\HijackThis - CHIP-Installer.exe
2014-06-01 11:15 - 2014-06-01 11:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-01 09:19 - 2011-08-18 05:44 - 00053376 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-01 08:26 - 2014-06-01 08:26 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 08:13 - 2014-06-01 08:13 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-01 08:10 - 2014-06-01 08:12 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-01 08:10 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI
2014-05-29 12:42 - 2014-05-29 12:42 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2014-05-29 00:44 - 2014-05-29 00:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\WinZip
2014-05-29 00:29 - 2014-05-29 00:43 - 197334425 _____ () C:\Users\Internet\Downloads\We are the Underdogs - Sound of the Underground Vol I.zip
2014-05-28 10:41 - 2014-05-28 10:41 - 00002269 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00002263 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Internet\Documents\processexplorer
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Andrea\AppData\Local\WinZip
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-28 10:40 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-28 10:40 - 2014-05-28 10:41 - 00000000 ____D () C:\Program Files\WinZip
2014-05-28 10:28 - 2014-05-28 10:28 - 01243655 _____ () C:\Users\Internet\Downloads\ProcessExplorer.zip
2014-05-28 09:43 - 2014-05-28 09:43 - 00001266 _____ () C:\Users\Andrea\Desktop\Revo Uninstaller.lnk
2014-05-28 09:43 - 2014-05-28 09:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-28 09:42 - 2014-05-28 09:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-05-27 18:21 - 2014-05-27 18:21 - 00010736 _____ () C:\Users\Internet\Documents\cc_20140527_182153.reg
2014-05-20 01:03 - 2014-05-20 01:03 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Atheros
2014-05-20 00:56 - 2014-05-25 19:15 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-05-20 00:56 - 2014-05-20 00:56 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Atheros
2014-05-20 00:52 - 2014-05-20 00:53 - 179393762 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_AW_Compal_Win7_64_Z74098.zip
2014-05-20 00:51 - 2014-05-20 00:53 - 00000000 ____D () C:\Users\Andrea\AppData\Local\CrashDumps
2014-05-19 23:45 - 2014-05-19 23:45 - 00000000 ____D () C:\Users\Andrea\Documents\Bluetooth Folder
2014-05-19 23:43 - 2014-05-19 23:43 - 00000000 ____D () C:\temp
2014-05-19 23:41 - 2014-05-19 23:42 - 179393768 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_Win7_64_Z74098.zip
2014-05-19 20:27 - 2014-06-02 12:52 - 00000000 __SHD () C:\Users\Andrea\AppData\Local\EmieSiteList
2014-05-19 20:27 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Andrea\AppData\Local\EmieUserList
2014-05-19 20:17 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-19 20:17 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-19 20:14 - 2014-05-19 20:14 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61[1].zip
2014-05-19 20:13 - 2014-05-19 20:13 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61.zip
2014-05-15 17:21 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 17:21 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 17:21 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 17:21 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:21 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 17:21 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 17:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 17:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 17:30 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 17:30 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 17:30 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 17:30 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 17:30 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 17:30 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 17:30 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 17:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 17:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 17:30 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 17:30 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 17:30 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 17:30 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 17:30 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 17:30 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 17:30 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 17:30 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 17:30 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 17:30 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 22:29 - 2014-06-01 12:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\Warframe
2014-05-10 22:27 - 2014-05-10 22:27 - 00331776 _____ () C:\Users\Internet\Downloads\Warframe.msi
2014-05-10 03:52 - 2014-06-02 16:16 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla Firefox
2014-05-07 03:02 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-07 03:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-07 03:01 - 2014-05-16 01:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 03:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-07 03:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-07 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-07 03:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-07 03:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-07 03:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-07 03:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-07 03:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-07 03:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-07 03:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-07 03:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-07 03:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-07 03:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-07 03:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-07 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-07 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-07 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-07 03:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-07 03:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-07 03:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-07 03:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-07 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-07 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-07 03:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-07 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-07 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-07 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-07 03:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-07 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-07 03:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-07 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-07 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-07 03:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-07 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-07 03:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-07 03:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-07 03:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-07 03:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-07 03:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-07 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-07 03:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-07 03:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-06-04 21:07 - 2014-06-04 21:06 - 00010211 _____ () C:\Users\Andrea\Desktop\FRST.txt
2014-06-04 21:07 - 2014-06-02 20:02 - 00000000 ____D () C:\Users\Andrea\AppData\Local\temp
2014-06-04 21:06 - 2014-06-01 20:57 - 00000000 ____D () C:\FRST
2014-06-04 21:05 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Internet\AppData\Local\temp
2014-06-04 21:05 - 2011-04-13 04:33 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-04 21:04 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-04 21:04 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-04 21:02 - 2011-04-13 04:33 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-04 20:56 - 2013-07-25 23:23 - 00044728 _____ () C:\Windows\setupact.log
2014-06-04 20:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-04 18:25 - 2011-07-24 05:59 - 01258908 _____ () C:\Windows\WindowsUpdate.log
2014-06-04 17:51 - 2014-06-01 20:57 - 00048572 _____ () C:\Users\Internet\Desktop\FRST.txt
2014-06-04 17:49 - 2014-06-04 21:06 - 02068992 _____ (Farbar) C:\Users\Andrea\Desktop\FRST64.exe
2014-06-04 17:49 - 2014-06-04 17:49 - 00000000 ____D () C:\Users\Internet\Desktop\FRST-OlderVersion
2014-06-04 17:49 - 2014-06-01 20:55 - 02068992 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2014-06-04 17:42 - 2014-06-04 17:42 - 00001286 _____ () C:\Users\Internet\Desktop\malwarescan 03.06.txt
2014-06-04 17:36 - 2014-06-03 23:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-04 17:34 - 2013-04-05 19:24 - 00001364 _____ () C:\Users\Internet\Desktop\Mozilla Firefox.lnk
2014-06-04 17:33 - 2014-06-04 17:33 - 00002152 _____ () C:\Users\Andrea\Desktop\JRT.txt
2014-06-04 17:27 - 2014-06-04 17:27 - 00000000 ____D () C:\Windows\ERUNT
2014-06-04 17:25 - 2014-06-04 17:25 - 01016261 _____ (Thisisu) C:\Users\Internet\Desktop\JRT.exe
2014-06-04 17:11 - 2013-08-01 01:26 - 00150578 _____ () C:\Windows\PFRO.log
2014-06-04 17:10 - 2014-06-04 17:08 - 00000000 ____D () C:\AdwCleaner
2014-06-04 06:14 - 2011-02-19 06:24 - 00711546 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 06:14 - 2011-02-19 06:24 - 00153736 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 06:14 - 2009-07-14 07:13 - 01652996 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 06:03 - 2013-11-10 11:42 - 00000000 ____D () C:\Users\Internet\AppData\Local\Battle.net
2014-06-04 02:21 - 2011-04-13 04:43 - 00000000 ____D () C:\Windows\el
2014-06-03 23:18 - 2014-06-03 23:18 - 01327971 _____ () C:\Users\Internet\Desktop\adwcleaner_3.211.exe
2014-06-03 23:17 - 2014-06-03 23:17 - 00001104 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-03 23:17 - 2014-06-03 23:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-03 23:16 - 2014-06-03 23:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-06-02 20:50 - 2014-06-02 20:50 - 00016234 _____ () C:\ComboFix.txt
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 20:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-02 20:50 - 2014-06-02 19:52 - 00000000 ____D () C:\Qoobox
2014-06-02 20:48 - 2014-06-02 19:51 - 00000000 ____D () C:\Windows\erdnt
2014-06-02 20:47 - 2011-08-17 23:00 - 00058928 _____ () C:\Users\Andrea\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-02 20:44 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-02 19:45 - 2014-06-02 19:45 - 05203398 ____R (Swearware) C:\Users\Internet\Desktop\ComboFix.exe
2014-06-02 16:41 - 2009-07-14 06:45 - 00280408 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-02 16:16 - 2014-05-10 03:52 - 00000000 ____D () C:\Users\Internet\AppData\Local\Mozilla Firefox
2014-06-02 15:24 - 2014-06-02 04:08 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\BitTorrent
2014-06-02 14:21 - 2014-06-02 14:21 - 00000000 ____D () C:\Users\Internet\AppData\Local\DDMSettings
2014-06-02 12:52 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Andrea\AppData\Local\EmieSiteList
2014-06-02 12:52 - 2013-11-22 17:50 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\DVDVideoSoft
2014-06-02 12:52 - 2013-11-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-06-02 12:52 - 2012-11-29 19:25 - 00000000 ____D () C:\Users\Internet\Documents\DVDVideoSoft
2014-06-02 12:52 - 2012-11-29 19:21 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\DVDVideoSoft
2014-06-02 12:50 - 2014-06-02 12:48 - 32680168 _____ (DVDVideoSoft Ltd. ) C:\Users\Internet\Downloads\FreeMP4VideoConverter-5.0.42.530.exe
2014-06-02 12:13 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-06-02 12:08 - 2014-06-02 12:08 - 00000000 ____D () C:\Users\Internet\AppData\Local\{C9A67DE0-4E90-42D5-B2B5-508B7483DE7A}
2014-06-02 07:13 - 2014-06-02 07:13 - 00004919 _____ () C:\ProgramData\uxxadbmu.rlu
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\MOVAVI
2014-06-02 07:13 - 2014-06-02 07:13 - 00000000 ____D () C:\Users\Internet\AppData\Local\Movavi
2014-06-02 07:13 - 2012-07-27 22:27 - 00058928 _____ () C:\Users\Internet\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-02 06:33 - 2011-03-07 12:16 - 00000000 ____D () C:\Users\Internet\Desktop\JDownloader
2014-06-02 05:39 - 2014-06-02 05:38 - 00000000 ____D () C:\Users\Internet\Documents\Beauties
2014-06-02 05:13 - 2014-06-02 05:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2014-06-02 05:09 - 2014-06-02 05:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerBlock - CHIP-Installer.exe
2014-06-02 04:48 - 2014-06-02 04:48 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\PeerGuardian - CHIP-Installer.exe
2014-06-02 04:10 - 2014-06-02 04:10 - 00001206 _____ () C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-06-02 04:10 - 2014-06-02 04:10 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\BitTorrent
2014-06-01 20:58 - 2014-06-01 20:58 - 00042013 _____ () C:\Users\Internet\Desktop\Addition.txt
2014-06-01 20:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-06-01 15:37 - 2014-06-01 15:35 - 31419822 _____ () C:\Users\Internet\Downloads\JDownloader.zip
2014-06-01 12:54 - 2014-06-01 12:54 - 00000000 ____D () C:\Users\Internet\Documents\zips
2014-06-01 12:54 - 2013-12-01 21:23 - 00000000 ____D () C:\Users\Internet\Documents\Downloads1
2014-06-01 12:53 - 2013-12-29 13:27 - 00000000 ____D () C:\Users\Internet\Documents\Karten
2014-06-01 12:50 - 2014-05-10 22:29 - 00000000 ____D () C:\Users\Internet\AppData\Local\Warframe
2014-06-01 12:38 - 2013-05-06 02:20 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-06-01 11:52 - 2014-06-01 11:52 - 00000871 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-06-01 11:52 - 2014-06-01 11:52 - 00000000 ____D () C:\Program Files\CPUID
2014-06-01 11:52 - 2014-06-01 11:51 - 01496480 _____ ( ) C:\Users\Internet\Downloads\cpu-z_1.692-setup-en.exe
2014-06-01 11:21 - 2014-06-01 11:21 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Desktop\HijackThis - CHIP-Installer.exe
2014-06-01 11:17 - 2013-05-27 05:46 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Malwarebytes
2014-06-01 11:17 - 2013-05-27 05:45 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 11:16 - 2014-06-01 11:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Internet\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-01 10:30 - 2013-08-06 00:39 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\uTorrent
2014-06-01 09:21 - 2013-10-29 23:45 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-01 09:14 - 2014-06-01 09:14 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-01 09:09 - 2011-08-17 23:00 - 00000000 ____D () C:\Users\Andrea
2014-06-01 09:06 - 2011-09-30 19:29 - 00000000 ____D () C:\Users\Internet
2014-06-01 09:05 - 2013-05-06 02:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-06-01 09:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-06-01 09:04 - 2012-09-26 01:01 - 00000000 ____D () C:\AMD
2014-06-01 08:26 - 2014-06-01 08:26 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 08:13 - 2014-06-01 08:13 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-01 08:13 - 2011-07-24 06:12 - 00000000 ____D () C:\ProgramData\AMD
2014-06-01 08:12 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-01 08:10 - 2014-06-01 08:10 - 00000000 ____D () C:\Program Files\ATI
2014-05-31 20:30 - 2012-09-29 16:27 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Spotify
2014-05-31 20:09 - 2012-09-29 16:28 - 00000000 ____D () C:\Users\Internet\AppData\Local\Spotify
2014-05-31 18:53 - 2012-09-27 22:34 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\SoftGrid Client
2014-05-31 17:03 - 2014-03-09 14:43 - 00000000 ____D () C:\Users\Internet\Documents\Bewerbungsunterlagen
2014-05-29 12:42 - 2014-05-29 12:42 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2014-05-29 00:44 - 2014-05-29 00:44 - 00000000 ____D () C:\Users\Internet\AppData\Local\WinZip
2014-05-29 00:43 - 2014-05-29 00:29 - 197334425 _____ () C:\Users\Internet\Downloads\We are the Underdogs - Sound of the Underground Vol I.zip
2014-05-28 10:41 - 2014-05-28 10:41 - 00002269 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00002263 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Internet\Documents\processexplorer
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\Users\Andrea\AppData\Local\WinZip
2014-05-28 10:41 - 2014-05-28 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-28 10:41 - 2014-05-28 10:40 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-28 10:41 - 2014-05-28 10:40 - 00000000 ____D () C:\Program Files\WinZip
2014-05-28 10:28 - 2014-05-28 10:28 - 01243655 _____ () C:\Users\Internet\Downloads\ProcessExplorer.zip
2014-05-28 10:01 - 2011-04-13 04:47 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-05-28 10:00 - 2011-07-24 06:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-28 09:43 - 2014-05-28 09:43 - 00001266 _____ () C:\Users\Andrea\Desktop\Revo Uninstaller.lnk
2014-05-28 09:43 - 2014-05-28 09:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-28 09:42 - 2014-05-28 09:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Internet\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-05-27 18:21 - 2014-05-27 18:21 - 00010736 _____ () C:\Users\Internet\Documents\cc_20140527_182153.reg
2014-05-27 18:06 - 2013-01-24 01:51 - 00007621 _____ () C:\Users\Andrea\AppData\Local\Resmon.ResmonCfg
2014-05-27 17:53 - 2014-02-26 00:07 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner v2.24
2014-05-27 17:52 - 2014-04-16 19:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcaniA - Gothic 4
2014-05-27 17:52 - 2012-04-14 21:18 - 00000000 ____D () C:\Windows\system32\Macromed
2014-05-27 17:52 - 2011-04-13 04:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-27 17:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-27 17:51 - 2011-08-27 15:46 - 00000000 ___RD () C:\MSOCache
2014-05-27 17:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-27 10:57 - 2013-07-13 14:23 - 00000000 ____D () C:\Users\Andrea\AppData\Local\Adobe
2014-05-25 19:15 - 2014-05-20 00:56 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-05-20 17:20 - 2013-10-29 02:10 - 00000000 ____D () C:\Users\Internet\Desktop\Andrej's Mukke
2014-05-20 01:03 - 2014-05-20 01:03 - 00000000 ____D () C:\Users\Internet\AppData\Roaming\Atheros
2014-05-20 00:56 - 2014-05-20 00:56 - 00000000 ____D () C:\Users\Andrea\AppData\Roaming\Atheros
2014-05-20 00:53 - 2014-05-20 00:52 - 179393762 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_AW_Compal_Win7_64_Z74098.zip
2014-05-20 00:53 - 2014-05-20 00:51 - 00000000 ____D () C:\Users\Andrea\AppData\Local\CrashDumps
2014-05-19 23:45 - 2014-05-19 23:45 - 00000000 ____D () C:\Users\Andrea\Documents\Bluetooth Folder
2014-05-19 23:43 - 2014-05-19 23:43 - 00000000 ____D () C:\temp
2014-05-19 23:42 - 2014-05-19 23:41 - 179393768 _____ () C:\Users\Internet\Downloads\Bluetooth_Atheros_Win7_64_Z74098.zip
2014-05-19 20:27 - 2014-05-19 20:27 - 00000000 __SHD () C:\Users\Andrea\AppData\Local\EmieUserList
2014-05-19 20:27 - 2014-05-19 20:17 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieUserList
2014-05-19 20:27 - 2014-05-19 20:17 - 00000000 __SHD () C:\Users\Internet\AppData\Local\EmieSiteList
2014-05-19 20:14 - 2014-05-19 20:14 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61[1].zip
2014-05-19 20:13 - 2014-05-19 20:13 - 00048475 _____ () C:\Users\Andrea\Desktop\bluetoothview_1.61.zip
2014-05-16 15:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 13:31 - 2014-02-20 02:42 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-16 13:31 - 2014-02-20 02:42 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-16 13:28 - 2011-09-30 19:29 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 13:28 - 2011-09-30 19:29 - 00000000 ___RD () C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 01:26 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 17:20 - 2013-08-15 03:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 17:17 - 2011-08-29 20:00 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-13 19:16 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-12 07:26 - 2014-06-03 23:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-03 23:17 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-03 23:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 22:31 - 2014-04-16 17:24 - 00035506 _____ () C:\Windows\DirectX.log
2014-05-10 22:27 - 2014-05-10 22:27 - 00331776 _____ () C:\Users\Internet\Downloads\Warframe.msi
2014-05-10 01:57 - 2011-04-13 04:33 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 01:57 - 2011-04-13 04:33 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 08:14 - 2014-05-14 17:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 17:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-06 06:40 - 2014-05-15 17:21 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 17:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 17:21 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 17:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 17:21 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 17:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-30 01:06

==================== End Of Log ============================
--- --- ---

--- --- ---

 

Themen zu Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?
100%, absturz, auslastung, beim starten, computer, firefox, grafikkarte, home, java/exploit.agent.nke, löschen, problem, programme, pup.optional.softonic.a, security, svchost.exe, win32/downloadsponsor.a, win32/softonicdownloader.e, win32/toolbar.conduit, win32/toolbar.conduit.y, win32/toolbar.widgi.b, windows


« Win 8.1: Einige Websites nicht erreichbar | WIN7 - Chrome startet immer mit websearches Seite »


Ähnliche Themen: Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?


  1. CPU Auslastung immer 49% oder höher
    Alles rund um Windows - 04.10.2015 (7)
  2. LOT Polish Airlines: Flugverkehr nach Hackerangriff wieder normal
    Nachrichten - 22.06.2015 (0)
  3. Ungewöhnliches Verhalten nachts, Mac startet neu kein Absturz - ist das normal?
    Alles rund um Mac OSX & Linux - 08.05.2015 (2)
  4. Win 8 auf Win Vista - PC hängt sich häufig auf, läuft nach 0,5 - 3 min. normal weiter ohne Fehlermeldung
    Alles rund um Windows - 15.03.2015 (5)
  5. Absturz des Laptops bei jedem Viren Scan
    Plagegeister aller Art und deren Bekämpfung - 08.09.2014 (17)
  6. Nach Absturz des PCs hohe CPU Auslastung und weniger FPS in Spielen
    Netzwerk und Hardware - 12.03.2014 (0)
  7. Windows friert nach Start für eine Weile ein, danach alles normal
    Log-Analyse und Auswertung - 09.05.2013 (3)
  8. Bei Abspielen von Videos - lautes Störgeräusch, PC reagiert nicht, nach >1Min. wieder normal
    Plagegeister aller Art und deren Bekämpfung - 15.03.2013 (10)
  9. Bluescreen nach Kaspersky Rescue Scan (10h) -> normal und abgesichter Modus
    Diskussionsforum - 05.08.2012 (9)
  10. Nur Firefox trotzdem dauerhaft 40 % Auslastung - normal?
    Log-Analyse und Auswertung - 20.09.2011 (1)
  11. Mein CPU Auslastung ist nicht Normal
    Log-Analyse und Auswertung - 14.07.2011 (2)
  12. nach pc-absturz immer bluescreens und 90% CPU auslastung
    Plagegeister aller Art und deren Bekämpfung - 05.08.2010 (1)
  13. Sehr hohe CPU auslastung bis zum absturz ( ohne erkenntlichen grund )
    Log-Analyse und Auswertung - 17.01.2010 (39)
  14. CPU Auslastung nicht normal!
    Log-Analyse und Auswertung - 18.10.2009 (5)
  15. CPU Auslastung liegt im Ruhezustand bei 50% und noch höher!
    Log-Analyse und Auswertung - 19.03.2009 (3)
  16. explorer.exe Auslastung oft höher als 50%; hier mein Log:
    Log-Analyse und Auswertung - 03.06.2005 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren? - Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 03.06.2014 Suchlauf-Zeit: 23:19:11 Logdatei: malwarescan 03.06.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.03.06 Rootkit Datenbank: v2014.06.02.01 Lizenz: Kostenlos Malware Schutz: - Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren?...
Archiv
Du betrachtest: Win 7 - CPU Auslastung höher als normal nach Absturz, evt. Viren? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131