| |
| |||||||
Log-Analyse und Auswertung: Windows 7 Chrome Saveron Werbung "popup" in praktisch jeder WebsiteWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
27.07.2014, 14:27
| #1 |
| |  Windows 7 Chrome Saveron Werbung "popup" in praktisch jeder Website Hallo zusammen Seit heute hab ich das Problem, dass in Chrome beim Besuch von Websiten diverse Wörter im Text als Link dargestellt werden, die mich auf Werbeseiten umleiten. Beim "mouseover" der Links erscheint unten rechts im popup "Ads by Saveron". Dieser Virus/ Addon/ Toolbar? ist extrem nervig also habe ich leider schon auf eigene Faust versucht das Problem zu beheben. Dabei bin ich nach folgender Anleitung vorgegangen: hxxp://malwaretips.com/blogs/scorpion-saver-removal/ Wobei STEP 2 nicht geklappt hat, weil ich kein betreffendes Addon bei Chrome gefunden habe und ich nach dem mehrmaligen wiederholen von STEP 4 aufgehört habe weil ich keinen Erfolg hatte. (Die Links tauchen in Chrome nach wie vor auf). Die Programme die ich bei STEP 1 entfernt habe sind: (Kopiert aus der Ereignisanzeige) -Das Produkt wurde durch Windows Installer entfernt. Produktname: MediaCaster by Ask. Produktversion: 12.15.2.537. Produktsprache: 1031. Hersteller: APN, LLC. Erfolg- bzw. Fehlerstatus der Deinstallation: 0. - und noch 2 weitere an deren Namen ich mich nicht mehr erinnere und die ich in der Ereignisanzeige leider nicht finden konnte. Im folgenden meine Logs und schon mal vielen Dank für die Hilfe Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:43 on 27/07/2014 (Tim)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Tim (administrator) on ECHELON on 27-07-2014 14:45:33
Running from C:\Users\Tim\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUS) C:\Program Files (x86)\ASUS\PCE-AC68 WLAN Card Utilities\WlanMgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-4200795567-1053499512-4211391413-1000\...\Run: [GoogleChromeAutoLaunch_035B4E54F90A1EA5C0B1EF50550A533B] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7F3636092F8ECF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\j8unh0to.default
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: saverrOn - C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\j8unh0to.default\Extensions\covk.i@v-ooiuavkr.com [2014-07-18]
Chrome:
=======
CHR HomePage: hxxp://www.google.ch/
CHR StartupUrls: "hxxp://www.google.ch/"
CHR Extension: (Google Docs) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-22]
CHR Extension: (Google Drive) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-22]
CHR Extension: (YouTube) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-22]
CHR Extension: (Adblock Plus) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-22]
CHR Extension: (Google-Suche) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-22]
CHR Extension: (Autocomplete = on) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecpgkdflcnofdbbkiggklcfmgbnbabhh [2014-06-22]
CHR Extension: (AdBlock) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-22]
CHR Extension: (Clean IMDb) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\ingodbhkemojiibhhbfhjaeaciikbiik [2014-07-18]
CHR Extension: (Any.do Extension) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdadialhpiikehpdeejjeiikopddkjem [2014-06-22]
CHR Extension: (Google Wallet) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-22]
CHR Extension: (Google Mail) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-22]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 PcaSp60; C:\Windows\SysWOW64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-27 14:45 - 2014-07-27 14:45 - 00009551 _____ () C:\Users\Tim\Downloads\FRST.txt
2014-07-27 14:45 - 2014-07-27 14:45 - 00000000 ____D () C:\FRST
2014-07-27 14:44 - 2014-07-27 14:44 - 02093568 _____ (Farbar) C:\Users\Tim\Downloads\FRST64.exe
2014-07-27 14:43 - 2014-07-27 14:43 - 00000468 _____ () C:\Users\Tim\Downloads\defogger_disable.log
2014-07-27 14:43 - 2014-07-27 14:43 - 00000000 _____ () C:\Users\Tim\defogger_reenable
2014-07-27 14:42 - 2014-07-27 14:42 - 00050477 _____ () C:\Users\Tim\Downloads\Defogger.exe
2014-07-27 12:05 - 2014-07-27 12:05 - 00000000 ____D () C:\Users\Tim\Downloads\Suits.S04E06.1080p.WEB-DL.DD5.1.H.264-NTb[rarbg]
2014-07-27 12:02 - 2014-07-27 12:04 - 330615144 ____R () C:\Users\Tim\Downloads\Graceland.S02E06.HDTV.x264-KILLERS.mp4
2014-07-27 11:13 - 2014-07-27 11:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tim\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-27 11:12 - 2014-07-27 11:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 11:12 - 2014-07-27 11:12 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-27 11:12 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-27 11:12 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-27 11:12 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-27 11:09 - 2014-07-27 11:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tim\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-27 11:08 - 2014-07-27 11:08 - 01354223 _____ () C:\Users\Tim\Downloads\adwcleaner_3.216 (1).exe
2014-07-27 11:05 - 2014-07-27 11:10 - 00000000 ____D () C:\AdwCleaner
2014-07-27 11:05 - 2014-07-27 11:05 - 01354223 _____ () C:\Users\Tim\Downloads\adwcleaner_3.216.exe
2014-07-27 11:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-27 11:02 - 2014-07-27 11:02 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-27 11:01 - 2014-07-27 11:01 - 00000000 ____D () C:\Program Files (x86)\saveron
2014-07-18 18:46 - 2014-07-18 18:49 - 00000000 ____D () C:\Users\Tim\Downloads\Suits.S04E05.720p.HDTV.x264-KILLERS[rarbg]
2014-07-18 18:45 - 2014-07-18 18:47 - 311687654 ____R () C:\Users\Tim\Downloads\Graceland.S02E05.REAL.HDTV.x264-KILLERS.mp4
2014-07-18 18:37 - 2014-07-27 11:01 - 00000000 ____D () C:\ProgramData\f7ff98a393eab4ba
2014-07-18 18:37 - 2014-07-18 18:37 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-18 18:37 - 2014-07-18 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-18 18:36 - 2014-07-27 11:07 - 00000000 ____D () C:\ProgramData\saveron
2014-07-18 18:36 - 2014-07-18 18:36 - 00000000 ____D () C:\Users\Tim\AppData\Local\Packages
2014-07-09 19:52 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 19:52 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 19:52 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 19:52 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 19:52 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 19:52 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 19:52 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 19:52 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 19:52 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 19:52 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 19:52 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 19:52 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 19:52 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 19:52 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 19:52 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 19:52 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 19:52 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 19:52 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 19:52 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 19:52 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 19:52 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 19:52 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 19:52 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 19:52 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 19:52 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 19:52 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 19:52 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 19:52 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 19:52 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 19:52 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 19:52 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 19:52 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 19:52 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 19:52 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 19:52 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 19:52 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 19:52 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 19:52 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 19:52 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 19:52 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 19:52 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 19:52 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 19:52 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 19:52 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 19:52 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 19:52 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 19:52 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 19:52 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 19:52 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 19:52 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 19:52 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 19:52 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 19:52 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 19:52 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 19:52 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 19:52 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 19:52 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 19:52 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 19:52 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 19:52 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 19:52 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 19:52 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 19:52 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 19:52 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 19:52 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 19:52 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 19:52 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 19:52 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 19:52 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-02 16:01 - 2014-07-02 16:01 - 00000000 ____D () C:\Users\Tim\AppData\Local\Adobe
2014-07-02 16:00 - 2014-07-02 16:01 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-02 16:00 - 2014-07-02 16:00 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-02 16:00 - 2014-07-02 16:00 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-07-02 16:00 - 2014-07-02 16:00 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-30 15:23 - 2014-06-30 15:23 - 00002013 _____ () C:\Users\Public\Desktop\Canon IJ Network Tool.lnk
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ___HD () C:\ProgramData\CanonIJFAX
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-30 15:23 - 2012-09-21 09:33 - 00321024 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_BLL.dll
2014-06-30 15:23 - 2012-05-25 09:21 - 00103936 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_BLU.dll
2014-06-30 15:23 - 2012-05-15 15:58 - 00098048 _____ () C:\Windows\SysWOW64\CNC176BD.TBL
2014-06-30 15:23 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ____D () C:\Windows\system32\STRING
2014-06-30 15:22 - 2012-09-21 05:00 - 00303104 _____ (CANON INC.) C:\Windows\system32\CNCALBL.DLL
2014-06-30 15:22 - 2012-09-20 05:00 - 00390656 _____ (CANON INC.) C:\Windows\system32\CNMLMBL.DLL
2014-06-30 15:22 - 2012-07-31 08:48 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2014-06-30 15:22 - 2012-07-31 08:48 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2014-06-30 15:22 - 2012-07-31 08:47 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL
2014-06-28 14:39 - 2014-06-28 14:39 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\WinRAR
2014-06-28 09:49 - 2014-07-18 18:37 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-28 09:48 - 2014-06-28 09:48 - 00005632 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-27 18:49 - 2014-06-27 18:49 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-27 18:44 - 2014-06-27 18:44 - 00000844 _____ () C:\Users\Tim\Desktop\JDownloader.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000808 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000768 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000753 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
2014-06-27 18:43 - 2014-07-18 18:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-27 18:43 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-27 18:43 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-06-27 18:43 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-06-27 18:43 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-06-27 18:43 - 2014-06-27 18:43 - 00000000 ____D () C:\ProgramData\Sun
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-27 14:45 - 2014-07-27 14:45 - 00009551 _____ () C:\Users\Tim\Downloads\FRST.txt
2014-07-27 14:45 - 2014-07-27 14:45 - 00000000 ____D () C:\FRST
2014-07-27 14:44 - 2014-07-27 14:44 - 02093568 _____ (Farbar) C:\Users\Tim\Downloads\FRST64.exe
2014-07-27 14:43 - 2014-07-27 14:43 - 00000468 _____ () C:\Users\Tim\Downloads\defogger_disable.log
2014-07-27 14:43 - 2014-07-27 14:43 - 00000000 _____ () C:\Users\Tim\defogger_reenable
2014-07-27 14:43 - 2014-06-22 16:37 - 00000000 ____D () C:\Users\Tim
2014-07-27 14:42 - 2014-07-27 14:42 - 00050477 _____ () C:\Users\Tim\Downloads\Defogger.exe
2014-07-27 14:37 - 2014-06-22 17:32 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-27 14:01 - 2014-06-22 17:44 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\TS3Client
2014-07-27 13:30 - 2014-06-23 20:38 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\vlc
2014-07-27 13:14 - 2014-06-23 18:36 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-27 12:05 - 2014-07-27 12:05 - 00000000 ____D () C:\Users\Tim\Downloads\Suits.S04E06.1080p.WEB-DL.DD5.1.H.264-NTb[rarbg]
2014-07-27 12:04 - 2014-07-27 12:02 - 330615144 ____R () C:\Users\Tim\Downloads\Graceland.S02E06.HDTV.x264-KILLERS.mp4
2014-07-27 11:45 - 2009-07-14 06:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-27 11:45 - 2009-07-14 06:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-27 11:42 - 2011-04-12 09:43 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-07-27 11:42 - 2011-04-12 09:43 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-07-27 11:42 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-27 11:41 - 2014-06-22 16:37 - 01405701 _____ () C:\Windows\WindowsUpdate.log
2014-07-27 11:38 - 2014-06-22 17:32 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-27 11:38 - 2014-06-22 16:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-27 11:38 - 2010-11-21 05:47 - 00009298 _____ () C:\Windows\PFRO.log
2014-07-27 11:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-27 11:38 - 2009-07-14 06:51 - 00028419 _____ () C:\Windows\setupact.log
2014-07-27 11:19 - 2014-07-27 11:12 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 11:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-07-27 11:13 - 2014-07-27 11:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tim\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-27 11:12 - 2014-07-27 11:12 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-27 11:12 - 2014-07-27 11:12 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-27 11:10 - 2014-07-27 11:05 - 00000000 ____D () C:\AdwCleaner
2014-07-27 11:09 - 2014-07-27 11:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tim\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-27 11:08 - 2014-07-27 11:08 - 01354223 _____ () C:\Users\Tim\Downloads\adwcleaner_3.216 (1).exe
2014-07-27 11:07 - 2014-07-18 18:36 - 00000000 ____D () C:\ProgramData\saveron
2014-07-27 11:05 - 2014-07-27 11:05 - 01354223 _____ () C:\Users\Tim\Downloads\adwcleaner_3.216.exe
2014-07-27 11:02 - 2014-07-27 11:02 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-27 11:01 - 2014-07-27 11:01 - 00000000 ____D () C:\Program Files (x86)\saveron
2014-07-27 11:01 - 2014-07-18 18:37 - 00000000 ____D () C:\ProgramData\f7ff98a393eab4ba
2014-07-18 18:49 - 2014-07-18 18:46 - 00000000 ____D () C:\Users\Tim\Downloads\Suits.S04E05.720p.HDTV.x264-KILLERS[rarbg]
2014-07-18 18:47 - 2014-07-18 18:45 - 311687654 ____R () C:\Users\Tim\Downloads\Graceland.S02E05.REAL.HDTV.x264-KILLERS.mp4
2014-07-18 18:37 - 2014-07-18 18:37 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-18 18:37 - 2014-07-18 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-18 18:37 - 2014-06-28 09:49 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-18 18:37 - 2014-06-27 18:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-18 18:36 - 2014-07-18 18:36 - 00000000 ____D () C:\Users\Tim\AppData\Local\Packages
2014-07-14 14:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-11 03:02 - 2014-06-27 18:43 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-06-27 18:43 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-06-27 18:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-06-27 18:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 10:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-10 09:35 - 2014-06-22 17:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 09:35 - 2011-04-12 09:55 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 09:35 - 2009-07-14 06:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-10 09:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-09 20:23 - 2014-06-22 17:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 20:22 - 2014-06-22 17:30 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-02 16:01 - 2014-07-02 16:01 - 00000000 ____D () C:\Users\Tim\AppData\Local\Adobe
2014-07-02 16:01 - 2014-07-02 16:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-02 16:01 - 2014-06-22 17:38 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Adobe
2014-07-02 16:00 - 2014-07-02 16:00 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-02 16:00 - 2014-07-02 16:00 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-07-02 16:00 - 2014-07-02 16:00 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-30 15:23 - 2014-06-30 15:23 - 00002013 _____ () C:\Users\Public\Desktop\Canon IJ Network Tool.lnk
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ___HD () C:\ProgramData\CanonIJFAX
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool
2014-06-30 15:23 - 2014-06-30 15:23 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-30 15:23 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-06-30 15:22 - 2014-06-30 15:22 - 00000000 ____D () C:\Windows\system32\STRING
2014-06-30 04:09 - 2014-07-09 19:52 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 19:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-28 14:39 - 2014-06-28 14:39 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\WinRAR
2014-06-28 09:48 - 2014-06-28 09:48 - 00005632 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-27 18:49 - 2014-06-27 18:49 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-27 18:44 - 2014-06-27 18:44 - 00000844 _____ () C:\Users\Tim\Desktop\JDownloader.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000808 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000768 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
2014-06-27 18:44 - 2014-06-27 18:44 - 00000753 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
2014-06-27 18:43 - 2014-06-27 18:43 - 00000000 ____D () C:\ProgramData\Sun
2014-06-27 09:12 - 2014-06-22 17:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
Some content of TEMP:
====================
C:\Users\Tim\AppData\Local\Temp\DSETUP.dll
C:\Users\Tim\AppData\Local\Temp\dsetup32.dll
C:\Users\Tim\AppData\Local\Temp\DXSETUP.exe
C:\Users\Tim\AppData\Local\Temp\JDSetup130483609589799808.exe
C:\Users\Tim\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Tim\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Tim\AppData\Local\Temp\optprosetup.exe
C:\Users\Tim\AppData\Local\Temp\Quarantine.exe
C:\Users\Tim\AppData\Local\Temp\utt214E.tmp.exe
C:\Users\Tim\AppData\Local\Temp\uttAD92.tmp.exe
C:\Users\Tim\AppData\Local\Temp\vlc-2.1.5-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 20:34
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014
Ran by Tim at 2014-07-27 14:45:47
Running from C:\Users\Tim\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32126 - BitTorrent Inc.)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
ASUS PCE-AC68 WLAN Card Utilities/Driver (HKLM-x32\...\{39BD9681-D3B1-435C-A0C1-F87C68513401}) (Version: 2.0.8.4 - ASUS)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.)
EVE Online (nur entfernen) (HKLM-x32\...\EVE) (Version: - CCP Games Ltd.)
EVEMon (HKLM-x32\...\EVEMon) (Version: 1.8.9 - battleclinic.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 9.4.10.297 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
28-06-2014 07:48:38 Installed Java 7 Update 60
02-07-2014 14:06:32 Windows Update
06-07-2014 07:36:05 Windows Update
09-07-2014 17:58:59 Windows Update
09-07-2014 18:21:53 Windows Update
14-07-2014 11:46:42 Windows Update
18-07-2014 16:36:03 Windows Update
18-07-2014 16:37:15 Installed Java 7 Update 65
27-07-2014 12:37:37 Geplanter Prüfpunkt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {67EAAACC-8922-4BCD-B3DC-51FD5780B093} - System32\Tasks\PCEAC68WLANMGR => C:\Program Files (x86)\ASUS\PCE-AC68 WLAN Card Utilities\WlanMgr.exe [2014-03-05] (ASUS)
Task: {84C4D153-C936-4D4D-968E-82397308648F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-22] (Google Inc.)
Task: {EBEC654B-B231-43F2-A420-FDC4A32F215E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-22] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-06-22 16:43 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-22 17:32 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-22 17:32 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-22 17:32 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-22 17:32 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-22 17:32 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-07-18 18:33 - 2014-07-08 08:18 - 14663856 _____ () C:\Users\Tim\AppData\Local\Google\Chrome\User Data\PepperFlash\14.0.0.145\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/27/2014 11:40:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:19:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:12:34 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:09:17 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:02:42 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
Error: (07/27/2014 11:02:30 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
Error: (07/27/2014 11:02:30 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
Error: (07/27/2014 11:02:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
Error: (07/27/2014 11:02:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
Error: (07/27/2014 11:02:28 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome
System errors:
=============
Error: (07/27/2014 02:45:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (07/27/2014 02:45:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office Sessions:
=========================
Error: (07/27/2014 11:40:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:19:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:12:34 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:09:17 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2014 11:02:42 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2014 11:02:30 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2014 11:02:30 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2014 11:02:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2014 11:02:29 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (07/27/2014 11:02:28 AM) (Source: MsiInstaller) (EventID: 10005) (User: Echelon)
Description: Produkt: MediaCaster by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren:
Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)
==================== Memory info ===========================
Percentage of memory in use: 14%
Total physical RAM: 16321.75 MB
Available physical RAM: 13944.03 MB
Total Pagefile: 32641.68 MB
Available Pagefile: 29778.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.88 GB) (Free:160.11 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:389.84 GB) NTFS
Drive e: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: () (Fixed) (Total:465.66 GB) (Free:465.56 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 002C91EA)
Partition 1: (Active) - (Size=233 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1FAC64CE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 27.07.2014 Scan Time: 11:14:05 Logfile: Malewarebytes log 1.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.27.04 Rootkit Database: v2014.07.17.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Tim Scan Type: Threat Scan Result: Completed Objects Scanned: 275989 Time Elapsed: 2 min, 3 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 2 PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Delete-on-Reboot, [c4bc1d87136874c2686885572ad8f10f], PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Delete-on-Reboot, [136db5efabd08fa7d4fc706c11f129d7], Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 27.07.2014 Scan Time: 11:19:24 Logfile: Malewarebytes log 2.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.27.04 Rootkit Database: v2014.07.17.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Tim Scan Type: Threat Scan Result: Completed Objects Scanned: 275892 Time Elapsed: 2 min, 8 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 2 PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Delete-on-Reboot, [e59b04a00873d75f6e62d60654aedc24], PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Delete-on-Reboot, [e8988b190279979f6f61b626bf4355ab], Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 27.07.2014 Scan Time: 11:35:22 Logfile: Malewarebytes log 3.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.27.04 Rootkit Database: v2014.07.17.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Tim Scan Type: Threat Scan Result: Completed Objects Scanned: 275933 Time Elapsed: 2 min, 1 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 2 PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Delete-on-Reboot, [6d13eaba9fdcaf87d6fa4b913fc3e31d], PUP.Optional.Superfish.A, C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Delete-on-Reboot, [2b5591136c0f7db9626ea03cb44e1fe1], Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-27 15:35:23
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP4T0L0-4 Samsung_SSD_840_EVO_250GB rev.EXT0BB0Q 232.89GB
Running: hp7huwlg.exe; Driver: C:\Users\Tim\AppData\Local\Temp\pxddapow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002ba7000 65 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 594 fffff80002ba7042 4 bytes [00, 00, 00, 00]
---- EOF - GMER 2.1 ----
Geändert von Ti one (27.07.2014 um 14:36 Uhr) Grund: GMER log hinzugefügt |
| Themen zu Windows 7 Chrome Saveron Werbung "popup" in praktisch jeder Website |
| administrator, adobe, adware, browser, canon, defender, desktop, entfernen, explorer, google, helper, homepage, mozilla, nvidia, popup, problem, registry, scan, security, services.exe, software, svchost.exe, system, uplay, werbung, windows, winlogon.exe |
Baum-Darstellung